Todoist v1 API Reference

Manage Todoist tasks — list, create, complete, update, and organize tasks and projects.

This skill appears to be a straightforward Todoist API reference, but before installing: 1) note the SKILL.md expects a TODOIST_TOKEN environment variable while the registry metadata doesn't list any required credentials—ask the publisher to fix that mismatch or confirm how the token should be supplied; 2) only provide a minimal-scope Todoist API token (create a dedicated integration token or a throwaway/test account token), never paste your full-account password or master token; 3) be aware the skill will make outbound HTTPS calls to api.todoist.com using your token, so only install if you trust the skill source; 4) if you want tighter control, test calls manually with curl first, or run the skill in a sandboxed environment and revoke or rotate the token after testing. If the publisher cannot explain the missing credential declaration, treat the skill cautiously.

Type: OpenClaw Skill Name: todoist-v1 Version: 1.0.0 The skill bundle is benign. It provides instructions and examples for interacting with the Todoist API using standard `curl` commands. Authentication relies on a `TODOIST_TOKEN` environment variable, which is a common and secure practice. There are no signs of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation within the provided `_meta.json` or `SKILL.md` files. All operations are aligned with the stated purpose of managing Todoist tasks and projects.