← Back to Skills Marketplace
Todoist API
by
Tristan Manchester
· GitHub ↗
· v1.0.0
283
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install todoist-api-skill
Description
Manages Todoist tasks, projects, sections, labels, comments, completed-task reports, activity logs, ID migration, project templates, and sync workflows throu...
Usage Guidance
This skill appears to be a legitimate Todoist API helper, but take these precautions before installing or running it: 1) The scripts expect a Todoist token (TODOIST_API_TOKEN / TODOIST_TOKEN) even though the registry metadata doesn't declare one — do not provide your token unless you trust the source. 2) Inspect scripts/todoist_api.py and smoke_test.py yourself (they are included) to confirm there are no unexpected network endpoints; the code defaults to api.todoist.com but allows --base-url (avoid pointing that to unknown hosts). 3) Run the read-only smoke_test first in an isolated environment with a token of limited scope or a throwaway account to verify behavior. 4) Prefer using --dry-run and --confirm for any write/bulk operations. 5) Ask the publisher to correct the registry metadata to list TODOIST_API_TOKEN (or make the credential requirement explicit) before installing in production. If you cannot verify these points, treat the skill as unsafe to receive your real Todoist token.
Capability Analysis
Type: OpenClaw Skill
Name: todoist-api-skill
Version: 1.0.0
The todoist-api skill bundle is a comprehensive and well-documented tool for managing Todoist data via its official API. The core logic in scripts/todoist_api.py and scripts/smoke_test.py uses standard Python libraries (urllib, json) to interact exclusively with api.todoist.com, with clear safety mechanisms like mandatory --dry-run or --confirm flags for destructive operations. No evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
The skill's name, description, and included scripts clearly target the Todoist REST API and the required capabilities (task/project/label management) match the code. However, the registry metadata lists no required environment variables or primary credential while both SKILL.md and the scripts expect a Todoist API token (TODOIST_API_TOKEN or TODOIST_TOKEN). This mismatch is incoherent: a Todoist integration legitimately needs an API token and the registry should declare that.
Instruction Scope
Runtime instructions and scripts stay within the Todoist API domain: they use api.todoist.com, support dry-run/confirm semantics, and the 'raw' and 'sync' escape hatches are documented. The CLI accepts --base-url which can point to an alternate host: this is a legitimate testing/compatibility feature but could be abused to send tokens to a non-Todoist endpoint if misused. The instructions do not ask for unrelated system files or unrelated credentials.
Install Mechanism
No install spec is provided (instruction-only with bundled Python scripts). Nothing is downloaded at install time; risk from install mechanism is low. The presence of code files means the code will run on the host, so the user should review the included scripts before executing.
Credentials
The skill legitimately requires a single Todoist API token (TODOIST_API_TOKEN or TODOIST_TOKEN), which is proportionate to its purpose. The concern is that the registry metadata does not declare this required credential (required env vars: none, primary credential: none), creating an information gap and increasing the chance a user might unwittingly expose secrets. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request persistent/always-on inclusion (always: false) and does not modify other skills or system-wide settings. Autonomous invocation is enabled (platform default) but not combined with other broad privileges here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install todoist-api-skill - After installation, invoke the skill by name or use
/todoist-api-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial public release with CLI and references for robust Todoist automation.
- Adds a command-line Todoist API client (scripts/todoist_api.py) with coverage for core resources, bulk/batched operations, and safe-agent workflows.
- Includes smoke test for read-only connectivity (scripts/smoke_test.py).
- Provides detailed user and agent documentation: reference, recipes, and gotchas for real-world Todoist automation.
- Features name resolution, dry-run/confirm modes, and bulk operation safety defaults.
- Supports output in JSON or summary format, with optional file output for large results.
- Assets for sync and review templates included for advanced Todoist workflows.
Metadata
Frequently Asked Questions
What is Todoist API?
Manages Todoist tasks, projects, sections, labels, comments, completed-task reports, activity logs, ID migration, project templates, and sync workflows throu... It is an AI Agent Skill for Claude Code / OpenClaw, with 283 downloads so far.
How do I install Todoist API?
Run "/install todoist-api-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Todoist API free?
Yes, Todoist API is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Todoist API support?
Todoist API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Todoist API?
It is built and maintained by Tristan Manchester (@tristanmanchester); the current version is v1.0.0.
More Skills