Todoist Litiao

Manage tasks and projects in Todoist. Use when user asks about tasks, to-dos, reminders, or productivity.

Security Scan

The skill's actions (running the Todoist CLI and using TODOIST_API_TOKEN) match its description and instructions, but minor metadata inconsistencies and the instruction to install a global npm CLI warrant a quick origin check before use.

Purpose & Capability

The skill name/description (Todoist task management) align with the declared requirements (a 'todoist' CLI binary and TODOIST_API_TOKEN) and the SKILL.md commands. However, _meta.json content (different ownerId, slug, and version) does not match the registry metadata, which is a packaging/metadata inconsistency that should be confirmed with the publisher.

Instruction Scope

SKILL.md only instructs installing/running the Todoist CLI and using the Todoist API token; it does not ask the agent to read unrelated files, other environment variables, or exfiltrate data to third-party endpoints. Commands are scoped to Todoist operations.

Install Mechanism

This is an instruction-only skill (no install spec). The doc tells users to npm install -g todoist-ts-cli which is a standard way to get the 'todoist' binary but does require installing a third-party npm package globally — a moderate, expected risk. There is no packaged install URL or extract step in the registry metadata.

Credentials

Only TODOIST_API_TOKEN is required, which is appropriate for a Todoist integration. No unrelated secrets or multiple credentials are requested.

Persistence & Privilege

The skill is not always-on and is user-invocable. It does not request elevated platform persistence or modification of other skills or system config.

Assessment

This skill appears to do what it says: it runs the Todoist CLI and needs your TODOIST_API_TOKEN. Before installing or providing a token: 1) verify the npm package 'todoist-ts-cli' and its publisher (installing global npm packages runs third-party code). 2) Confirm the skill source/owner — the included _meta.json has different owner/slug/version than the registry entry, which could indicate a packaging error or repackaging. 3) Use a Todoist token with the minimum necessary scope and treat it like a secret. 4) If you prefer lower risk, install the CLI in a contained environment (container/VM) rather than globally on your machine.

Todoist CLI

CLI for Todoist task management, built on the official TypeScript SDK.

Installation

# Requires todoist-ts-cli >= 0.2.0 (for --top / --order)
npm install -g todoist-ts-cli@^0.2.0

Setup

1. Get API token from https://todoist.com/app/settings/integrations/developer
2. Either:

   todoist auth <your-token>
   # or
   export TODOIST_API_TOKEN="your-token"
   

Commands

Tasks

todoist                    # Show today's tasks (default)
todoist today              # Same as above
todoist tasks              # List tasks (today + overdue)
todoist tasks --all        # All tasks
todoist tasks -p "Work"    # Tasks in project
todoist tasks -f "p1"      # Filter query (priority 1)
todoist tasks --json

Add Tasks

todoist add "Buy groceries"
todoist add "Meeting" --due "tomorrow 10am"
todoist add "Review PR" --due "today" --priority 1 --project "Work"
todoist add "Prep slides" --project "Work" --order 3  # add at a specific position (1-based)
todoist add "Triage inbox" --project "Work" --order top  # add to top (alternative to --top)
todoist add "Call mom" -d "sunday" -l "family"  # with label

Manage Tasks

todoist view <id>          # View task details
todoist done <id>          # Complete task
todoist reopen <id>        # Reopen completed task
todoist update <id> --due "next week"
todoist move <id> -p "Personal"
todoist delete <id>

Search

todoist search "meeting"

Projects & Labels

todoist projects           # List projects
todoist project-add "New Project"
todoist labels             # List labels
todoist label-add "urgent"

Comments

todoist comments <task-id>
todoist comment <task-id> "Note about this task"

Usage Examples

User: "What do I have to do today?"

todoist today

User: "Add 'buy milk' to my tasks"

todoist add "Buy milk" --due "today"

User: "Remind me to call the dentist tomorrow"

todoist add "Call the dentist" --due "tomorrow"

User: "Mark the grocery task as done"

todoist search "grocery"   # Find task ID
todoist done <id>

User: "What's on my work project?"

todoist tasks -p "Work"

User: "Show my high priority tasks"

todoist tasks -f "p1"

Filter Syntax

Todoist supports powerful filter queries:

• p1, p2, p3, p4 - Priority levels
• today, tomorrow, overdue
• @label - Tasks with label
• #project - Tasks in project
• search: keyword - Search

Notes

• Task IDs are shown in task listings
• Due dates support natural language ("tomorrow", "next monday", "jan 15")
• Priority 1 is highest, 4 is lowest
• Use --order <n> (1-based) or --order top to insert a task at a specific position within a project/section