← 返回 Skills 市场
298
总下载
0
收藏
0
当前安装
10
版本数
在 OpenClaw 中安装
/install openclaw-rtm
功能描述
Remember The Milk skill for OpenClaw
安全使用建议
This package appears to be a straightforward Remember The Milk integration and is coherent with its README and code. Before installing: (1) verify you trust the skill source (the registry metadata lacks a homepage and the owner/slug are opaque); (2) expect the skill to save your API key/shared secret and the RTM auth token as plaintext JSON in your home directory (~/.rtm-credentials.json and ~/.rtm-token.json) — the code sets restrictive file permissions (0o600) but the contents are not encrypted; (3) if you prefer, use a secure secrets store rather than leaving keys in files or a .env; (4) if you uninstall, delete those files and revoke the RTM token in your RTM account; (5) the registry metadata inconsistency (required env vars: none vs plugin manifest listing required env vars) is a packaging/metadata issue — consider asking the publisher for clarification or reviewing the source code yourself before use.
功能分析
Type: OpenClaw Skill
Name: openclaw-rtm
Version: 1.0.9
The skill provides a legitimate integration with the Remember The Milk (RTM) service for task management. It handles authentication via API keys and tokens, storing them locally in the user's home directory (e.g., `~/.rtm-token.json`) using restricted file permissions (mode 0600) as described in the documentation. The implementation is transparent, contains no external dependencies, and communicates exclusively with the official RTM API endpoint (api.rememberthemilk.com).
能力评估
Purpose & Capability
The skill claims to integrate Remember The Milk (RTM) and the code and README exclusively implement RTM API interactions. The plugin manifest (openclaw.plugin.json) declares RTM API credentials (RTM_API_KEY, RTM_SHARED_SECRET) which are exactly what the skill needs. Note: the registry metadata included with the submission listed 'Required env vars: none' which contradicts the plugin manifest and SKILL.md; this is an inconsistency in metadata but not evidence of malicious behavior.
Instruction Scope
SKILL.md and index.js instruct the agent/user how to obtain and store RTM credentials and authorize the app. The runtime instructions and code only read/write the skill's .env (in the skill folder) and three files in the user's home directory (~/.rtm-credentials.json, ~/.rtm-token.json, ~/.rtm-id-cache.json). The README warns that the token is saved in plaintext and the code sets file mode 0o600 when writing files. There are no instructions to read unrelated system files, other credentials, or to send data to unexpected endpoints; the network calls go to official RTM endpoints.
Install Mechanism
No external download/install spec is present (instruction-only install). SKILL.md suggests 'npm link' which is standard and package.json provides a bin entry. There are no remote downloads, URL shorteners, or archive extraction steps. The package's CLI entry points to test.js (used as a lightweight CLI/test runner) which is unconventional but not inherently risky.
Credentials
The only secrets needed are the RTM API Key and Shared Secret and an RTM auth token; these are appropriate for the described purpose. The code persistently saves credentials and the auth token to files in the user's home directory; while file mode 0o600 is used, the token/credentials are stored in plaintext JSON. Also note the mismatch between the registry metadata (which shows no required env vars) and openclaw.plugin.json (which lists RTM_API_KEY and RTM_SHARED_SECRET).
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide agent settings. It persists its own credential and cache files under the user's home directory (normal for a CLI integration). The skill allows autonomous invocation (disable-model-invocation: false) which is the platform default; this combined with only RTM credentials does not create a disproportionate risk.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-rtm - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-rtm触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.9
**Task management now uses persistent Task IDs instead of session-based short IDs.**
- All commands requiring a task reference now use the permanent RTM `task_id` (e.g., `8573921`) rather than a session-specific short ID.
- Command documentation and examples have been updated to reflect the new task identification method.
- Listing tasks now displays and references the persistent `task_id`, making task operations more robust and consistent.
v1.0.8
openclaw-rtm 1.0.8 Changelog
- Documentation improved in SKILL.md: formatting and section headings are now clearer and more consistent.
- Important and note callouts updated for clarity and visibility.
- Task listing command description enhanced to clarify the meaning of "completed" and "all" options.
- Property display details for task listing revised for better readability.
- No code or feature changes; this is a documentation update only.
v1.0.7
- The default behavior of the `rtm list` command now only fetches incomplete tasks for faster, cleaner responses.
- Added support for explicitly listing completed tasks (`rtm list completed`, up to 100 tasks) or all tasks (`rtm list all`).
- Documentation improved to clarify new `list` command options and results.
v1.0.6
- Added `.env.example` and `.gitignore` files to the project.
- Updated documentation with installation instructions for using the `rtm` command globally via `npm link`.
- Documented new credential configuration methods: using `rtm config` command or a `.env` file.
- Made credential storage more flexible and secure by supporting config file and environment variable options.
v1.0.5
- No changes detected in this version.
- Skill documentation and features remain unchanged from the previous release.
v1.0.4
- Added documentation for the new `rtm note` command to add notes to tasks.
- Added instructions for modifying task properties: due date, start date, priority, and postpone functionality, with relevant command examples.
- No code changes; documentation only update.
v1.0.3
- Updated setup instructions to require API credentials via environment variables instead of editing source files.
- Added warnings to improve security by discouraging embedding secrets in code.
- Included notes about handling the local authentication token safely.
- No code changes; documentation improvements only.
v1.0.2
- Added instructions for obtaining and setting Remember The Milk API credentials.
- Updated task listing to include both incomplete and completed tasks, displaying their completion status.
- Improved documentation for clarity and setup guidance.
v1.0.1
- No user-facing changes detected in this release.
- Documentation and skill functionality remain unchanged from the previous version.
v1.0.0
- Initial release of hello-world-skill for OpenClaw.
- Registers a simple hello command (`hello [name]`) that replies with a personalized greeting.
- Designed as a minimal example for learning and extension.
元数据
常见问题
Openclaw with Remember The Milk 是什么？
Remember The Milk skill for OpenClaw. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 298 次。
如何安装 Openclaw with Remember The Milk？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-rtm」即可一键安装，无需额外配置。
Openclaw with Remember The Milk 是免费的吗？
是的，Openclaw with Remember The Milk 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Openclaw with Remember The Milk 支持哪些平台？
Openclaw with Remember The Milk 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Openclaw with Remember The Milk？
由 creamhead（@kissyjpf）开发并维护，当前版本 v1.0.9。
推荐 Skills