← Back to Skills Marketplace
Todokan
by
Banana-Tea-Labs
· GitHub ↗
· v1.3.2
466
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install todokan
Description
Manage tasks, boards, thoughts, and reviews in Todokan via MCP
Usage Guidance
This skill appears coherent, but review these practical points before installing: 1) Only provide the minimum-scoped API key you need — use a worker (read/comment) key if you don't require create/update/delete. 2) Double-check TODOKAN_MCP_URL to ensure you point to the intended environment (production vs staging). 3) The skill can delete and modify data; the SKILL.md requires confirmation, but you should still be cautious and avoid granting broad keys to automated agents unless you trust the skill. 4) Rotate keys periodically and treat the API key like any secret (don't paste it into chat windows). 5) If you want extra safety, test the skill against a staging key/endpoint first.
Capability Analysis
Type: OpenClaw Skill
Name: todokan
Version: 1.3.2
The OpenClaw Todokan skill bundle is classified as benign. The `SKILL.md` file, which dictates agent behavior, includes robust guardrails such as explicit confirmation for destructive actions (e.g., `delete_task`), warnings against storing sensitive data, and clear scope awareness for different API endpoints. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to bypass user intent or security. The required environment variables (`TODOKAN_API_KEY`, `TODOKAN_MCP_URL`) are standard for API integrations, and the listed external endpoints (`https://todokan.com/mcp`, `https://staging--todokan.netlify.app/mcp`) appear legitimate for the stated purpose.
Capability Assessment
Purpose & Capability
Name/description (manage Todokan via MCP) match the declared env vars (TODOKAN_API_KEY, TODOKAN_MCP_URL) and the SKILL.md focuses on MCP tool calls (list/create/update/delete tasks, boards, documents). Nothing requested appears unrelated to the stated functionality.
Instruction Scope
SKILL.md is an instruction-only runtime spec that confines actions to MCP endpoints and agent-facing operations (list, search, get_events_since, create/update/delete tasks/documents). It does not instruct reading arbitrary host files, unrelated environment variables, or exfiltration to unknown endpoints. Guardrails (confirm before delete, avoid storing secrets) are explicitly present.
Install Mechanism
No install spec or code files are present; this is instruction-only, so nothing will be downloaded or written to disk by an installer. Low installation risk.
Credentials
Only two env vars are required (API key and MCP URL), which are appropriate and expected for a remote API integration. The SKILL.md references passing the API key via Authorization header — consistent with declared env vars. No unrelated credentials or secret-sounding variables are requested.
Persistence & Privilege
The skill can perform full CRUD when pointed at the planner endpoint; however 'always' is false and the SKILL.md requires explicit confirmation for destructive actions. Consider principle of least privilege: if you only need read/comment behavior, use the worker endpoint / a read-only key rather than a planner key.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install todokan - After installation, invoke the skill by name or use
/todokan - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.2
bump version after duplicate 1.3.1
v1.3.1
sync VERSION with SKILL.md and frontmatter cleanup
v1.3.0
Add AI visibility gate enforcement, settings toggle for AI controls, updated docs
v1.2.0
todokan 1.2.0
- Added explicit documentation of required environment variables and their purpose to prerequisites section.
- Clarified the need for MCP server and setup instructions reference.
- Minor formatting and wording updates for clarity in prerequisites.
- No changes to functionality or tool ordering—docs and metadata only.
v1.1.0
Todokan 1.1.0 is a major documentation update, now entirely in English.
- SKILL.md rewritten in English for global usability (was previously German).
- All activation triggers, tool instructions, output examples, guardrails, and data model descriptions are now clear and accessible for non-German speakers.
- No logic or code changes; documentation content only.
- Role of endpoints, safe handling of sensitive data, and confirmation procedures clarified for broader audiences.
v1.0.0
Todokan 1.0.0 — Initial Release
- Introduces kanban-style task and project management via MCP integration.
- Supports managing tasks, boards, habitats (workspaces), documents, and reviews.
- Enforces safe actions with clear confirmation steps before creating, updating, or deleting items.
- Implements guardrails to prevent hallucinated data, protect sensitive information, and ensure correct tool usage.
- Provides structured output formats for briefings, task drafts, and document drafts.
- Requires TODOKAN_API_KEY and TODOKAN_MCP_URL environment variables for operation.
Metadata
Frequently Asked Questions
What is Todokan?
Manage tasks, boards, thoughts, and reviews in Todokan via MCP. It is an AI Agent Skill for Claude Code / OpenClaw, with 466 downloads so far.
How do I install Todokan?
Run "/install todokan" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Todokan free?
Yes, Todokan is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Todokan support?
Todokan is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Todokan?
It is built and maintained by Banana-Tea-Labs (@banatealab); the current version is v1.3.2.
More Skills