← Back to Skills Marketplace
chrisvel

tududi

by chrisvel · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1362
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install tududi
Description
Manage tasks, projects, and notes in tududi (self-hosted task manager). Use for todo lists, task management, project organization.
Usage Guidance
This skill appears to be a simple tududi API helper, but its SKILL.md requires two environment variables (TUDUDI_URL and TUDUDI_API_TOKEN) that the registry metadata does not declare. Before installing: (1) ask the publisher to update the manifest to list required env variables and mark the API token as the primary credential; (2) only provide a scoped API token (least privilege) and point TUDUDI_URL to a trusted/self-hosted endpoint (prefer HTTPS); (3) avoid putting long-lived high-privilege tokens in a shared openclaw.json unless you trust the skill and host; (4) verify the skill behavior in a safe environment first. If the publisher cannot justify the missing manifest entries, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill Name: tududi Version: 1.0.1 The skill is designed to interact with a self-hosted task manager (`tududi`) using a user-provided URL and API token. All `curl` commands in `SKILL.md` are directed to the configured `$TUDUDI_URL` and use the `$TUDUDI_API_TOKEN` for authentication, which is consistent with the stated purpose. There is no evidence of data exfiltration to external, unrelated endpoints, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's intended behavior.
Capability Assessment
Purpose & Capability
The skill's name and description (self-hosted tududi task manager) match the runtime instructions: curl-based calls to a user-provided TUDUDI_URL using an API token. The described capabilities are consistent with a simple API wrapper.
Instruction Scope
SKILL.md instructs the agent to call the tududi API and to read environment variables (TUDUDI_URL, TUDUDI_API_TOKEN) from openclaw.json; it does not instruct any broad data collection or unrelated file reads. However, the instructions rely on environment variables that the skill manifest did not declare, which is an inconsistency that affects trust and runtime behavior.
Install Mechanism
No install spec and no code files — instruction-only skill. This is low-risk from an install perspective because nothing is downloaded or written to disk by the skill package itself.
Credentials
The SKILL.md requires an API token (TUDUDI_API_TOKEN) and a base URL (TUDUDI_URL), which are proportionate to the stated purpose. However, the registry metadata lists no required environment variables or primary credential, so the manifest underreports the sensitive data the skill needs. That mismatch is a red flag: a token is required at runtime but not declared in the skill metadata.
Persistence & Privilege
The skill does not request persistent/always-on inclusion (always: false) and does not request elevated platform privileges. Autonomous invocation is allowed by default but is not combined with other privilege/always flags here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install tududi
  3. After installation, invoke the skill by name or use /tududi
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Clarified API route conventions, specifying plural for GET (list) and singular for create/update/delete. - Updated all create, update, and delete examples to use singular endpoints (e.g., /task, /project). - Switched update task method from PUT to PATCH; delete operations now require task/inbox UID. - Added support and documentation for tags in task creation and update. - Added examples for deleting tasks and inbox items. - Included tag and inbox API usage examples.
v1.0.0
- Initial release of the tududi skill. - Enables management of tasks, projects, and notes for the self-hosted tududi task manager. - Provides basic operations: list, create, and update tasks; list and create projects. - Uses API token authentication via Authorization header. - Supports filtering and task status management. - Documentation for configuration and usage included.
Metadata
Slug tududi
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is tududi?

Manage tasks, projects, and notes in tududi (self-hosted task manager). Use for todo lists, task management, project organization. It is an AI Agent Skill for Claude Code / OpenClaw, with 1362 downloads so far.

How do I install tududi?

Run "/install tududi" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is tududi free?

Yes, tududi is completely free (open-source). You can download, install and use it at no cost.

Which platforms does tududi support?

tududi is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created tududi?

It is built and maintained by chrisvel (@chrisvel); the current version is v1.0.1.

💬 Comments