滴答清单任务管理工具

Name: 滴答清单任务管理工具
Author: woodcoal

功能描述

滴答清单/TickTick 任务管理工具——创建、查看、完成、删除任务和项目。Use when user says: 创建任务、添加待办、今日任务、查看清单、完成任务、滴答清单、TickTick、TODO、待办事项、任务管理、项目管理、标记完成、删除任务、设置截止日期、任务优先级、新建项目、收集箱、inbox。

使用说明 (SKILL.md)

\r \r

首次使用：配置与授权\r

\r

配置凭据: 在 .env 中填写 DIDA_CLIENT_ID 和 DIDA_CLIENT_SECRET。\r
完成授权: 运行 python3 index.py auth 并在浏览器完成操作。\r \r

命令结构\r

\r 所有命令均采用 python3 index.py \x3Ccategory> \x3Csubcommand> [args] 格式。\r \r 注意：\r \r

空格要求：命令名、子命令名和参数之间必须使用空格分隔（例如：project update \x3Cid> 而非 project update\x3Cid>）。\r
安全警告：禁止自动执行任何 delete 操作。在执行 project delete 或 task delete 之前，必须获得用户针对具体 ID 的明确批准。\r \r

Intent Decision Tree\r

\r

用户想要…\r
├─ 项目管理 (project)\r
│  ├─ 列出所有项目 ──────→ project list [--force]\r
│  ├─ 查看项目任务 ──────→ project get \x3CprojectId> [--force]\r
│  ├─ 查看项目元数据 ────→ project info \x3CprojectId>\r
│  ├─ 创建新项目 ────────→ project create "\x3Cname>" [--color x]\r
│  ├─ 更新项目 ──────────→ project update \x3CprojectId> [--name x]\r
│  ├─ 清除本地缓存 ──────→ project clear-cache\r
│  └─ 删除项目 (需确认) ─→ project delete \x3CprojectId> !! ⚠️ 需用户批准\r
├─ 任务操作 (task)\r
│  ├─ 查看任务详情 ──────→ task get \x3CprojectId> \x3CtaskId>\r
│  ├─ 创建新任务 ────────→ task create "\x3Ctitle>" [--project id] [--due YYYY-MM-DD]\r
│  ├─ 创建清单任务 ──────→ task create-checklist "\x3Ctitle>" --project \x3Cid> --items "a|b|c"\r
│  ├─ 更新任务 ──────────→ task update \x3CprojectId> \x3CtaskId> [--title x]\r
│  ├─ 完成任务 ──────────→ task complete \x3CprojectId> \x3CtaskId>\r
│  ├─ 删除任务 (需确认) ─→ task delete \x3CprojectId> \x3CtaskId> !! ⚠️ 需用户批准\r
│  ├─ 移动任务 ──────────→ task move \x3CfromPid> \x3CtoPid> \x3CtaskId>\r
│  └─ 高级 JSON 模式 ────→ task create-raw / update-raw\r
└─ 查询与筛选 (search)\r
   ├─ 今日待办 ──────────→ search today [--force]\r
   ├─ 未来几天到期 ──────→ search upcoming [days] [--force]\r
   ├─ 指定区间到期 ──────→ search due-range \x3Cstart> \x3Cend> [--force]\r
   ├─ 已完成任务 ────────→ search completed \x3Cstart> \x3Cend> [--force]\r
   ├─ 高级筛选 ──────────→ search filter [--project id] [--priority N]\r
   └─ 收集箱 ────────────→ search inbox [--force]\r
```\r
\r
## 核心工作流：性能与缓存优化\r
\r
为了提高响应速度并减少 API 配额消耗，本工具内置了缓存机制（默认 365 分钟）：\r
\r
1.  **主动查询**: 优先使用缓存。\r
    - `python3 index.py project list` 获取缓存的项目列表。\r
    - `python3 index.py project get \x3Cid>` 获取缓存的项目任务。\r
2.  **强制刷新**: 如果怀疑数据陈旧，使用 `--force` 参数。\r
    - 示例：`python3 index.py search today --force`\r
3.  **自动失效**:\r
    - 执行任何 `create`、`update`、`delete` 或 `complete` 操作后，相关项目的缓存会**自动清除**。下一次查询将自动从服务器获取最新数据。无需手动刷新。\r
4.  **手动维护**: 如果发现同步异常，可运行 `python3 index.py project clear-cache`。\r
\r
## 参数说明\r
\r
- `--force`: 忽略本地缓存，强制从服务器拉取最新数据。\r
- `--priority`: 0=无, 1=低, 3=中, 5=高。\r
- `--due`: 格式为 `YYYY-MM-DD`。\r
- `--items`: 清单子项，用 `|` 分隔，例如 `"买牛奶|买鸡蛋"`。\r
- `--tags`: 逗号分隔，例如 `"工作,紧急"`。\r
\r
## 故障排除\r
\r
- **数据不一致**: 如果在网页端修改了任务但在 CLI 没看到，请加 `--force` 重新查询。\r
- **未授权**: 运行 `python3 index.py auth`。\r
- **ID 错误**: 运行 `python3 index.py project list --force` 核对最新 ID。\r
- **获取帮助**: 在任何分类后加 `-h`，如 `python3 index.py task -h`。\r

安全使用建议

This skill is functionally coherent for interacting with Dida365/TickTick, but note two things before installing: (1) The registry metadata incorrectly says there are no required environment variables—you must provide DIDA_CLIENT_ID and DIDA_CLIENT_SECRET (or a DIDA_ACCESS_TOKEN) for it to work. (2) The tool saves OAuth tokens and cache to files in the skill folder (.dida-token.json and .dida-cache.json) and reads .env, so treat those files as secrets: don't commit them to version control, restrict file permissions, and run in an isolated environment if you distrust the source. If you proceed, verify the client_id/client_secret come from your own developer account (developer.dida365.com), and be prepared to revoke the app/refresh token from the developer portal if you suspect compromise. If you want higher assurance, inspect the included Python files locally or run the tool inside a disposable container/VM before granting real credentials.

功能分析

Type: OpenClaw Skill Name: dida365-skill Version: 1.0.0 The dida365-skill bundle is a legitimate tool for managing tasks and projects via the Dida365/TickTick API. It implements a standard OAuth 2.0 flow, uses local JSON files for caching and token storage, and relies exclusively on the Python standard library. The SKILL.md instructions include explicit safety warnings requiring user approval for destructive actions (delete), and no evidence of data exfiltration, malicious execution, or prompt injection was found.

能力评估

ℹ Purpose & Capability

The code, README, and SKILL.md all implement a TickTick/Dida365 CLI that legitimately needs an OAuth client_id/client_secret or an access token. However the registry metadata listed 'Required env vars: none' which is incorrect: auth.py expects DIDA_CLIENT_ID and DIDA_CLIENT_SECRET (or DIDA_ACCESS_TOKEN). This metadata mismatch is inconsistent and should be corrected.

✓ Instruction Scope

SKILL.md instructs the agent/user to populate .env, run `python3 index.py auth`, and use the CLI commands. The runtime instructions remain within the stated purpose (managing projects/tasks). The workflow explicitly warns against auto-deleting and requires user confirmation for destructive actions. The skill does read/write local files (.env, .dida-token.json, .dida-cache.json) which is expected for an OAuth CLI.

✓ Install Mechanism

There is no install spec (instruction-only in registry), but the bundle includes Python source files. No external downloads or package managers are used. Code uses only Python stdlib and will be executed locally; no installer or remote code fetch is present.

⚠ Credentials

The code requires secrets (DIDA_CLIENT_ID and DIDA_CLIENT_SECRET or DIDA_ACCESS_TOKEN) which are appropriate for an OAuth client, but the skill metadata failed to declare them. The skill will store tokens (including refresh_token) in a local file (.dida-token.json). Requesting these credentials is proportionate to the stated purpose, but the omission in metadata and local persistence create a higher risk of accidental exposure.

✓ Persistence & Privilege

The skill does not request always:true and does not modify other skills or system-wide settings. It persists data only to local files (.dida-token.json and .dida-cache.json) in the skill directory; this is expected for a CLI but users should be aware of local file storage and file-permissions risk.

版本历史

v1.0.0

- Initial release of dida365-skill, supporting task and project management for 滴答清单/TickTick. - Enables creating, viewing, completing, and deleting tasks and projects via CLI commands. - Provides an intent decision tree for quick command reference and use cases. - Includes a caching mechanism to optimize performance and reduce API usage, with manual and auto-clear options. - Emphasizes explicit user confirmation for any delete operations to enhance safety. - Detailed instructions for setup, authorization, command structure, and troubleshooting are included for smooth onboarding.

元数据

Slug dida365-skill

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题