Pndr

Personal productivity app with Ideas/Tasks, Journal, Habits, Package tracking, Lists, and more via MCP

This skill is an instruction-only connector to pndr.io and appears consistent with its stated purpose. Before installing: 1) Verify you trust https://pndr.io and confirm the OAuth client you create is limited in scope; 2) Install mcporter from a known source and confirm its integrity; 3) When asked to provide client_id/client_secret or an access token, only paste values you created for this integration (do not reuse broad credentials); 4) Store tokens in local config files you control and revoke them if you stop using the integration; 5) If OpenClaw offers an automatic setup that asks you to paste credentials, double-check the prompt originates from the OpenClaw UI. If you want extra caution, create a dedicated OAuth client with minimal permissions and short-lived tokens.

Type: OpenClaw Skill Name: pndr Version: 1.0.20260202 The skill bundle is benign. It integrates with a personal productivity app (Pndr) via the Model Context Protocol (MCP). The `SKILL.md` provides clear instructions for setting up OAuth authentication with `pndr.io` using a standard `curl` command to obtain an access token. All listed tools and functionalities are consistent with a productivity application, such as managing tasks, habits, and journal entries, and there is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The `download_attachment` tool is a legitimate feature for retrieving user's own attachments from the Pndr service.