← 返回 Skills 市场
Microsoft To Do
作者
Karthikeyan N
· GitHub ↗
· v1.0.1
· MIT-0
284
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install microsoft-graph-todo
功能描述
Microsoft To Do via Microsoft Graph. List task lists, read tasks, create tasks, update tasks, and mark tasks complete.
安全使用建议
The skill appears coherent and implements a standard device-code OAuth flow for Microsoft To Do. Before installing: review the included scripts/ms_todo_auth.py (it will create token.json and device_code.json under a user config directory and will read an optional scripts/.env), confirm you are comfortable storing tokens on that machine, do not commit token files to source control, and use the least-privilege app registration (Tasks.Read or Tasks.ReadWrite as needed). Because the package source/homepage is unknown, verify the script contents yourself and prefer creating your own Entra app registration rather than trusting any prepopulated client IDs; if anything looks unexpected, do not proceed and consider running the commands in a sandboxed environment.
功能分析
Type: OpenClaw Skill
Name: microsoft-graph-todo
Version: 1.0.1
The skill provides a legitimate implementation for managing Microsoft To Do tasks via the Microsoft Graph API. It uses a standard OAuth2 device-code flow for authentication, implemented in 'scripts/ms_todo_auth.py', and follows security best practices by storing tokens in OS-native configuration directories rather than insecure shell profiles. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
Name/description match the behavior: it uses Microsoft Graph To Do endpoints. Required binaries (python3) and environment variables (MS_TODO_CLIENT_ID, MS_TODO_TENANT_ID) are exactly what a delegated device-code flow needs.
Instruction Scope
SKILL.md limits actions to obtaining device codes, polling/refreshing tokens, and calling Graph endpoints. It instructs storing client_id/tenant_id and token/device JSON in a per-user config dir and shows exact curl examples. It does not request unrelated files, paths, or external endpoints beyond Microsoft (login.microsoftonline.com, graph.microsoft.com).
Install Mechanism
No install spec; the skill is instruction-only with one small included Python helper. Nothing is downloaded from arbitrary URLs and no archives are extracted.
Credentials
Requested environment variables are limited to MS_TODO_CLIENT_ID and MS_TODO_TENANT_ID (and optional config overrides). No client secrets or unrelated credentials are requested. The helper uses delegated device-code flow which is appropriate for this use case.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or cross-skill configuration changes. It writes its own token and device JSON into a user-scoped config directory (expected for OAuth helpers).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install microsoft-graph-todo - 安装完成后，直接呼叫该 Skill 的名称或使用
/microsoft-graph-todo触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added explicit required environment variables (`MS_TODO_CLIENT_ID`, `MS_TODO_TENANT_ID`) to metadata.
- Clarified that the access token and device code helpers write secrets only to disk, not stdout, for improved handling of sensitive credentials.
- Documented that token and device code responses are saved in `token.json` and `device_code.json`, and not echoed with bearer/refresh tokens in outputs.
- Updated metadata with the new `primaryEnv` field to signal the primary environment variable.
v1.0.0
Initial release of the Microsoft To Do (Graph) skill.
- Implements user authentication with Microsoft Graph using device code flow and delegated permissions.
- Supports listing task lists, reading tasks, creating, updating, completing, and deleting tasks.
- Uses OS-native config directory for client ID, tenant ID, and token storage with optional local `.env` overrides.
- Provides detailed instructions for app registration, authentication, and common Graph API operations.
- Includes comprehensive guidance for setup, common errors, and validation steps.
元数据
常见问题
Microsoft To Do 是什么？
Microsoft To Do via Microsoft Graph. List task lists, read tasks, create tasks, update tasks, and mark tasks complete. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 284 次。
如何安装 Microsoft To Do？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install microsoft-graph-todo」即可一键安装，无需额外配置。
Microsoft To Do 是免费的吗？
是的，Microsoft To Do 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Microsoft To Do 支持哪些平台？
Microsoft To Do 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Microsoft To Do？
由 Karthikeyan N（@karthidreamr）开发并维护，当前版本 v1.0.1。
推荐 Skills