← Back to Skills Marketplace
nickian

Vikunja Tasks

by nickian · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1857
Downloads
5
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install vikunja-tasks
Description
Manage tasks and projects on a self-hosted Vikunja instance. Use when the user wants to create, view, complete, or manage tasks, check what's due or overdue, list projects, or get task notifications. Also use for to-do lists, reminders, and task tracking.
Usage Guidance
This skill's code matches its description (it calls a Vikunja server with an API token), but the package metadata fails to declare the sensitive environment variables and runtime dependencies the SKILL.md and script require. Before installing: (1) verify the skill source (the registry lists no homepage), (2) confirm you are comfortable providing VIKUNJA_URL and VIKUNJA_TOKEN and that the token has limited scope, (3) ensure the host has curl, jq, and python3 available (the script uses them), (4) review the included scripts yourself (they are plain shell and appear to call only your Vikunja instance), and (5) be cautious when enabling the suggested cron/notification delivery — it will send task lists to whichever channel you configure (e.g., Telegram). If you cannot verify the source or are uncomfortable providing the token, do not install. Also ask the publisher to update the skill metadata to declare the required env vars and binaries for transparency.
Capability Analysis
Type: OpenClaw Skill Name: vikunja-tasks Version: 1.0.0 The skill bundle is designed to manage tasks and projects on a self-hosted Vikunja instance. It utilizes `curl` to interact with the user-configured Vikunja API endpoint (`VIKUNJA_URL`) using a provided `VIKUNJA_TOKEN`. All network calls are directed to this specified endpoint, and there is no evidence of data exfiltration to unauthorized external destinations. The `SKILL.md` includes instructions for setting up a cron job with a message to the agent for proactive task notifications, which is a form of prompt injection, but its intent is clearly benign and aligned with the skill's stated purpose of providing task notifications, not to subvert agent behavior or access unrelated sensitive data. The `vikunja.sh` script uses `jq` for JSON parsing and `python3` for URL encoding, which are standard and appropriate practices.
Capability Assessment
Purpose & Capability
The skill name, description, SKILL.md, and the included script all consistently implement a Vikunja REST API client (list/create/complete tasks, projects, notifications). Requesting a Vikunja URL and API token makes sense for this purpose.
Instruction Scope
The SKILL.md and the script instruct the agent to rely on environment variables VIKUNJA_URL and VIKUNJA_TOKEN and to run the included scripts; but the registry metadata does not declare these env vars. The SKILL.md also recommends adding a cron job using a platform-specific clawdbot command that will deliver notifications to a channel (e.g., Telegram) — this is platform-integrated behavior that should be explicitly documented and consented to.
Install Mechanism
No install spec is present (instruction-only with an included script). This minimizes installer risk because nothing is downloaded or automatically executed by an installer, but the included script will be executed at runtime if invoked.
Credentials
The code and SKILL.md require VIKUNJA_URL and VIKUNJA_TOKEN (sensitive credentials) and rely on external binaries (curl, jq, python3, and date utilities) — yet the registry metadata lists no required env vars or binaries. Requesting a Vikunja API token is appropriate for the described function, but the omission in metadata is a discrepancy that reduces transparency.
Persistence & Privilege
The skill is not forced-always and does not request system-wide configuration changes. The SKILL.md suggests adding a scheduled job (cron) via the platform's clawdbot utility, which is normal for periodic notifications but should be done only with user consent.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install vikunja-tasks
  3. After installation, invoke the skill by name or use /vikunja-tasks
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: manage tasks and projects on self-hosted Vikunja via REST API
Metadata
Slug vikunja-tasks
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Vikunja Tasks?

Manage tasks and projects on a self-hosted Vikunja instance. Use when the user wants to create, view, complete, or manage tasks, check what's due or overdue, list projects, or get task notifications. Also use for to-do lists, reminders, and task tracking. It is an AI Agent Skill for Claude Code / OpenClaw, with 1857 downloads so far.

How do I install Vikunja Tasks?

Run "/install vikunja-tasks" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Vikunja Tasks free?

Yes, Vikunja Tasks is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Vikunja Tasks support?

Vikunja Tasks is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Vikunja Tasks?

It is built and maintained by nickian (@nickian); the current version is v1.0.0.

💬 Comments