Remember The Milk

Manage Remember The Milk tasks — list, add, complete, delete, search, prioritize, tag, move, and annotate tasks with notes. Use when the user asks about tasks, todos, to-do lists, reminders, or Remember The Milk.

This skill appears to do exactly what it says: manage RTM tasks. Before installing, decide whether to use a dedicated RTM API key/account (so you limit exposure), ensure RTM_API_KEY and RTM_SHARED_SECRET are provided securely via the skill config, and protect or remove the saved token file (~/.rtm_token) (chmod 600 or delete it if you don't want persistent access). Be aware the auth requests 'delete' permission — if you prefer, create a key/account with minimum privileges. If you need higher assurance, inspect the full script yourself; it uses only the standard library and talks only to rememberthemilk.com endpoints.

Type: OpenClaw Skill Name: rtm Version: 1.1.0 The OpenClaw skill for Remember The Milk is benign. It provides a CLI tool to manage RTM tasks, requiring API keys and storing an auth token locally at `~/.rtm_token`. All network communication is exclusively with `api.rememberthemilk.com` and `www.rememberthemilk.com`, as confirmed by the `api_call` function in `scripts/rtm.py`. The `SKILL.md` transparently discloses the storage of the auth token and the 'delete' permission scope, advising users on security best practices. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent.