MH things-mac

Manage Things 3 via the `things` CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user as...

This skill appears to do what it says — manage Things 3 via the 'things' CLI — but it requires access to your local Things database and may need you to grant Full Disk Access to the calling app (OpenClaw.app) for gateway/autonomous runs. Before installing/using: 1) Review and trust the upstream repo (github.com/ossianhempel/things3-cli); prefer installing a pinned release instead of '@latest' to avoid pulling unexpected code. 2) Only grant Full Disk Access to OpenClaw.app if you understand and accept that it gives broad filesystem access; if unsure, run the CLI manually from Terminal instead. 3) Treat THINGS_AUTH_TOKEN as a secret: store it securely and only provide it if you need write/update operations. 4) If you are concerned about autonomous agent actions, restrict or disable autonomous invocation for this skill and enable it only when you explicitly want the agent to perform Things operations. 5) Optionally inspect the ThingsData-* path and the CLI locally before permitting gateway access.

Type: OpenClaw Skill Name: mh-things-mac Version: 1.0.0 The skill is classified as suspicious due to several high-risk capabilities, even though they are plausibly needed for its stated purpose of managing Things 3. The `SKILL.md` instructs OpenClaw to install the `things3-cli` via `go install github.com/ossianhempel/things3-cli/cmd/things@latest`, which introduces a supply chain risk by fetching and executing code from a remote repository. Additionally, the skill explicitly mentions the need to grant 'Full Disk Access' to OpenClaw.app for database reads, which is a broad and high-privilege permission. The skill also involves handling `THINGS_AUTH_TOKEN` for update operations, a sensitive credential. While there is no evidence of intentional malicious behavior (data exfiltration, backdoors, or prompt injection with harmful objectives), these capabilities represent significant vulnerabilities if exploited.