功能描述

Habitica gamified habit tracker integration. Use for listing/creating/completing habits, dailies, todos, and rewards. Trigger on "habitica", "习惯", "待办", "日常任务", or requests to check off tasks.

使用说明 (SKILL.md)

Habitica Skill

Name: Habitica
Author: tonyunturn

Full-featured CLI for Habitica's gamified task manager.

Setup

Credentials in ~/.habitica:

HABITICA_USER_ID="your-user-id"
HABITICA_API_TOKEN="your-api-token"

Get from: Habitica → Settings → Site Data → Show API Token

Commands

Tasks

./scripts/habitica.sh list [habits|dailys|todos|rewards|all]
./scripts/habitica.sh create \x3Ctype> "text" ["notes"]
./scripts/habitica.sh score \x3Ctask-id> [up|down]
./scripts/habitica.sh update \x3Ctask-id> --text "new" --notes "new"
./scripts/habitica.sh delete \x3Ctask-id>

User & Stats

./scripts/habitica.sh user          # Basic stats
./scripts/habitica.sh stats         # Full stats (STR/INT/CON/PER)

Collections

./scripts/habitica.sh pets          # Your pets
./scripts/habitica.sh mounts        # Your mounts
./scripts/habitica.sh achievements  # Achievement list
./scripts/habitica.sh inventory     # Eggs, potions, food, quest scrolls

Party & Social

./scripts/habitica.sh party         # Party info + chat
./scripts/habitica.sh party-chat 10 # Last N messages
./scripts/habitica.sh party-send "message"
./scripts/habitica.sh guilds        # Guild list

Skills (Class Abilities)

./scripts/habitica.sh skills        # List available skills
./scripts/habitica.sh cast \x3Cskill> [taskId]

Rogue: pickPocket, backStab, toolsOfTrade, stealth Warrior: smash, defensiveStance, valorousPresence, intimidate Mage: fireball, mpheal, earth, frost Healer: heal, healAll, protectAura, brightness

Quest

./scripts/habitica.sh quest         # Current quest status
./scripts/habitica.sh quest-accept  # Check and accept pending quest invitations

Other

./scripts/habitica.sh history [exp|todos]
./scripts/habitica.sh cron          # Force new day

Notes

Dailies use dailys (Habitica's spelling)
Task IDs are UUIDs from list output
Rate limit: 30s between automated calls

Background Execution (Sub-agents)

For batch operations (e.g., scoring multiple tasks) or slow operations, spawn a sub-agent to keep the main chat responsive.

Prompt Pattern:

Task: Habitica Batch Operation
- Score task 123 (up)
- Score task 456 (up)
- Create todo "New Task"
Report back briefly when done.

When to use:

User asks to complete >1 task at once
User asks for a summary/analysis that requires multiple API calls (e.g., "check all my tasks and tell me what to do")
Network latency is high

安全使用建议

Things to consider before installing or using this skill: - Metadata mismatch: the skill does not declare required env vars, but you must provide HABITICA_USER_ID and HABITICA_API_TOKEN (SKILL.md and script expect them). Ask the publisher to add these to the skill metadata so automated systems and users are aware secrets are required. - Credential storage: the README says to put credentials in ~/.habitica and the script 'sources' that file. 'source' will execute any shell code in the file, not just read variables. If you use a file, make it contain only plain assignments (HABITICA_USER_ID=... HABITICA_API_TOKEN=...) and set tight file permissions (chmod 600). Alternatively, set the two variables in the environment rather than using a sourced file. - Background/sub-agent guidance: the skill suggests spawning sub-agents for batch operations. That allows the skill to make multiple API calls in the background — avoid enabling autonomous execution unless you trust the skill and its owner. - Review the script: it appears to call only Habitica's API (https://habitica.com/api/v3), which matches purpose. Still, inspect scripts/habitica.sh yourself (it's included) to confirm there are no unexpected endpoints or commands. - Runtime dependencies: the script uses curl and jq but the skill metadata does not list them. Ensure your environment has these binaries before use. If you don't trust the skill's publisher or can't verify the script, do not provide your Habitica API token. Request that the publisher update the skill metadata to declare required credentials and clarify the background execution behaviour.

功能分析

Type: OpenClaw Skill Name: habitica-skill Version: 0.1.3 The OpenClaw AgentSkills skill bundle for Habitica is benign. It provides a CLI interface to the Habitica API, reading credentials from `~/.habitica` and making `curl` requests to `https://habitica.com/api/v3`. All operations are clearly aligned with the stated purpose of managing Habitica tasks and user data. The `SKILL.md` provides functional instructions for the agent's use, including guidance for background execution, but contains no prompt injection attempts to subvert the agent's core directives or perform unauthorized actions. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.

能力评估

ℹ Purpose & Capability

The name/description match the included script: the code calls Habitica's API and exposes list/create/score/update/delete and user/party endpoints — this is coherent with a Habitica integration. However, the registry metadata declares no required credentials while both SKILL.md and scripts expect HABITICA_USER_ID and HABITICA_API_TOKEN (or a ~/.habitica file). That metadata omission is inconsistent and should be corrected.

⚠ Instruction Scope

SKILL.md and the script instruct the agent to load credentials from ~/.habitica using 'source'. Sourcing a user file executes any shell code in it, not only variable assignments, which is a risk. The SKILL.md also recommends spawning 'sub-agents' for batch operations; that lets the skill perform multi-call background work autonomously and could widen the blast radius if credentials are compromised. The script's network calls are all to habitica.com, which is expected.

✓ Install Mechanism

There is no remote install/download step and no third-party packages fetched at install time — the skill is provided as local shell script(s) and docs. This limits supply-chain risk. The script does assume availability of curl and jq at runtime but does not declare them in the skill metadata.

⚠ Credentials

The functionality legitimately requires Habitica credentials (HABITICA_USER_ID and HABITICA_API_TOKEN), but the skill metadata lists no required env vars or primary credential. That mismatch is problematic: users and automated systems won't be warned that secrets are needed. Also, the recommended storage location (~/.habitica) is sourced by the script, increasing risk if the file contains more than simple assignments. No other unrelated credentials are requested.

ℹ Persistence & Privilege

The skill does not request 'always: true' and does not appear to modify other skills or system-wide settings. However, the SKILL.md explicitly suggests spawning sub-agents for background/batch tasks; while not inherently malicious, background execution increases the surface area and should be considered before granting autonomous invocation.

版本历史

v0.1.3

habitica-skill v0.1.3 - Added new command: quest-accept, to check and accept pending quest invitations. - Updated documentation to include the quest-accept usage under the Quest section.

v0.1.2

- No user-facing changes in this release. - Internal updates were made to scripts/habitica.sh; documentation remains unchanged.

v0.1.1

- No user-facing or documentation changes in this release. - Internal update: script modifications only; functionality and usage remain the same.

v0.1.0

Initial release of Habitica Skill — a CLI integration for managing Habitica tasks and user data. - List, create, update, score (complete), and delete habits, dailies, todos, and rewards from the command line. - View and manage user stats, inventory, pets, mounts, achievements, party info, guilds, and quests. - Cast class abilities directly from the CLI for all four character classes. - Supports batch/background execution to keep user interactions responsive. - Credentials setup via ~/.habitica; command list and usage examples included in documentation.

元数据

Slug habitica-skill

版本 0.1.3

许可证 —

累计安装 0

当前安装数 0

历史版本数 4

常见问题

Habitica 是什么？

Habitica gamified habit tracker integration. Use for listing/creating/completing habits, dailies, todos, and rewards. Trigger on "habitica", "习惯", "待办", "日常任务", or requests to check off tasks. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2142 次。

如何安装 Habitica？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install habitica-skill」即可一键安装，无需额外配置。

Habitica 是免费的吗？

是的，Habitica 完全免费（开源免费），可自由下载、安装和使用。

Habitica 支持哪些平台？

Habitica 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Habitica？

由 TONYUNTURN（@tonyunturn）开发并维护，当前版本 v0.1.3。

Habitica