Manage Todoist tasks using the `todoist` CLI. Add, list, and complete tasks from the command line.

Proceed with caution. Before installing or enabling this skill: (1) Ask the publisher to update the skill metadata to declare exactly which environment variable(s) it needs (TODOIST_API_TOKEN and/or MSGRAPH_TOKEN). Do not set sensitive tokens until you confirm they are required and why. (2) Verify that the pip package 'todoist-api-python' actually provides a 'todoist' CLI (check the package's PyPI/GitHub page and its console_scripts entry points); if it does not, the install step will not provide the binary the skill expects. (3) If you must test, do so in a sandboxed environment and use least-privilege test tokens (revocable API tokens). (4) If the skill claims to support Microsoft To‑Do, confirm exactly what permissions the MSGRAPH_TOKEN requires — Microsoft Graph scopes can grant broad access to mailbox and files. (5) Prefer skills whose required credentials are declared in metadata and whose install source is a well-known project URL you can inspect. If the author cannot clarify these mismatches, avoid installing.

Type: OpenClaw Skill Name: brainz-tasks Version: 1.0.0 The skill bundle is benign. It provides instructions and metadata for an OpenClaw agent to manage Todoist tasks using the `todoist` CLI. The `SKILL.md` file clearly outlines the skill's purpose, installation steps via pip for `todoist-api-python`, and usage examples. It legitimately requires `TODOIST_API_TOKEN` or `MSGRAPH_TOKEN` environment variables for authentication, which is expected for an API-driven task management tool. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts with harmful intent. All instructions and dependencies are aligned with the stated functionality.