Moltbot Plugin 2do

Create tasks and send them to 2Do app via email. Use when the user wants to: (1) add, create, or record a task/todo/reminder in any form - e.g. '添加任务', '创建待办', '新建任务', '加个任务', '记录任务', 'add task', 'create todo'; (2) ask to be reminded of something - e.g. '提醒我', '别忘了', '记得', '帮我记一下', 'remind me', 'remember to'; (3) mention something they need to do and want it tracked - e.g. '明天要开会', '周五前交报告', '下午去买菜'; (4) want to add items to a todo list or task manager - e.g. '加到待办', '放到任务列表', '记到清单里'; (5) describe a task with list/tag organization - e.g. '添加到工作列表', '标签是紧急'; (6) mention urgency or importance - e.g. '紧急', '重要', 'urgent', 'important'. Parses natural language (Chinese and English) to extract task title, due date/time, priority, optional list name, and optional tags, then sends a formatted email to the user's configured 2Do inbox.

This skill appears to do what it claims: parse natural-language tasks and send them by SMTP to your configured 2Do email. Before installing: 1) Only provide an SMTP account you trust (use an app-specific password where possible) — the skill will send task text to that email/your mail provider. 2) Configure 2Do capture rules (sender or TITLE_PREFIX) to avoid other emails being captured as tasks. 3) Prefer building the package (npm/pnpm install && npm run build) so the script runs the compiled artifact instead of falling back to npx tsx (which may fetch code at runtime). 4) Review the repository/source yourself if you want higher assurance — the registry entry lists no homepage/source URL (source shown as unknown), so verify origin before giving credentials. 5) If you have sensitive task contents, remember they will be transmitted to your SMTP provider and stored according to that provider's policies.

Type: OpenClaw Skill Name: moltbot-plugin-2do Version: 1.0.2 The skill is designed to parse natural language tasks and send them to the 2Do app via email. It transparently requires and uses SMTP credentials (SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS) and a recipient email (TWODO_EMAIL) from environment variables, as detailed in SKILL.md and src/config.ts. The email sending is handled by the legitimate 'nodemailer' library with secure TLS settings (src/email-sender.ts). There is no evidence of intentional harmful behavior such as data exfiltration beyond the stated purpose, unauthorized command execution, persistence mechanisms, obfuscation, or malicious prompt injection attempts in any of the analyzed files (code or documentation). All functionalities are clearly aligned with the skill's stated purpose.