← Back to Skills Marketplace
liliangjie91

Todo4google

by Leonard · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
90
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install todo4google
Description
管理todo事项,记录工作日志,并与Google Task同步。根据本地ToDo创建Goole Task,并根据完成情况更新Google Task状态。上传todo文件到Google Drive进行归档。
Usage Guidance
在安装或启用前请确认以下几点: - 验证本地“gog”二进制的来源与可信度(它将是与 Google API 交互的实际主体)。检查其发行渠道、版本和是否为你期望的工具;不要安装未知来源的二进制。 - 检查 gog 已使用合适的 Google 账号并且仅授予必要权限(Tasks/Drive 的最小权限)。如果可能,先在受限或测试账号上试运行。 - 该技能会读写你 agent 工作目录下的 markdown 文件并将其上传到 Drive;如有敏感信息,请先审查文件内容或改用隔离目录。 - 注意命令行注入风险:技能把 notes 以 printf 插入到 shell 命令中,确保 notes 不包含不想执行的 shell 代码或特殊字符,或在使用前进行适当转义/清洗。 - 并发创建/回写操作可能导致 race condition,建议初期以单线程/手动触发模式测试,确认行为正确后再自动化。 如果你不能验证 gog 的来源或不愿意授予其 Google 访问权限,则不要启用此技能。
Capability Analysis
Type: OpenClaw Skill Name: todo4google Version: 1.0.1 The skill manages Google Tasks and Drive using a CLI tool named 'gog'. It contains a significant shell injection vulnerability in FUNC-06 and FUNC-07 within SKILL.md, where user-provided 'notes' are embedded directly into shell command substitutions using '$(printf notes)'. While the intent appears to be a legitimate productivity tool, the lack of input sanitization in the command construction poses a high risk of arbitrary command execution if the agent processes malicious task notes.
Capability Assessment
Purpose & Capability
技能声明的功能(管理本地 markdown todo、与 Google Tasks 同步、将文件上传到 Google Drive)与其运行指令一致。要求存在名为“gog”的本地二进制与对 Google Tasks/Drive 的操作直接相关,故总体上属于预期范围。
Instruction Scope
SKILL.md 明确指示在 agent 工作目录下创建/读取/修改指定路径下的 markdown 文件,并使用 gog CLI 执行 task add/update 与 drive upload。指令不会要求读取系统上其它无关路径或额外环境变量,但会写回 taskId 到本地文件并上传到云端,这是该技能的核心行为。需要注意:说明中使用 shell 插值 (e.g. $(printf ...)) 将 notes 注入命令行,若 notes 含有未转义的特殊字符或换行可能导致命令解析问题或注入风险;此外并发调用与文件回写需要注意并发冲突。
Install Mechanism
这是一个纯说明型技能(无安装规范、无代码文件),不会在安装时下载或写入额外代码,安装风险最低。
Credentials
技能未声明任何环境变量或凭据,假定本地已安装并配置好可访问 Google 的 gog CLI(即 gog 自行处理授权)。这在逻辑上可以成立,但用户应该意识到:该技能需要有效的 Google 访问凭据(通常由 gog 存储或由用户交互式登录获得),而这些凭据并未在元数据中显式列出。建议在信任该技能前确认 gog 的认证来源、所需权限范围(scopes)以及是否仅与 Google API 通信。
Persistence & Privilege
技能未设置 always:true,也没有要求修改其他技能或系统范围配置。它在权限层面没有异常持久化或强制启用行为。
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install todo4google
  3. After installation, invoke the skill by name or use /todo4google
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Improved multi-day and weekly organization: now each todo file contains one week's tasks, structured by date. - Clarified workflow functions (FUNC-00 to FUNC-08) for easier reference and automation. - Enhanced support for editing daily "Works" and "Summary" sections alongside todos. - Updated sync logic: Google Task operations now target only the specified day's items, tracking taskId fields more precisely. - Added metadata and configuration options for Google task list and todo file paths.
v1.0.0
- Initial release of todo4google. - Manage and sync daily ToDos between local markdown files and Google Task. - Supports creating and parsing local todo files, auto-generating next day’s todo from unfinished tasks, and adding daily summaries. - Enables creation and status updates of Google tasks, with archiving to Google Drive as Google Docs. - Trigger actions via user commands such as summarizing, generating, creating, or updating tasks.
Metadata
Slug todo4google
Version 1.0.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is Todo4google?

管理todo事项,记录工作日志,并与Google Task同步。根据本地ToDo创建Goole Task,并根据完成情况更新Google Task状态。上传todo文件到Google Drive进行归档。 It is an AI Agent Skill for Claude Code / OpenClaw, with 90 downloads so far.

How do I install Todo4google?

Run "/install todo4google" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Todo4google free?

Yes, Todo4google is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Todo4google support?

Todo4google is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Todo4google?

It is built and maintained by Leonard (@liliangjie91); the current version is v1.0.1.

💬 Comments