Things Mac 1.0.0

Manage Things 3 via the `things` CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user as...

This skill appears to do what it claims (manage Things 3 via a CLI), but pay attention to two things before installing: (1) the SKILL.md asks you to grant Full Disk Access to the calling app (Terminal or Clawdbot.app). Full Disk Access is a broad macOS permission — only grant it if you trust the app and the binary you install. (2) The instructions reference optional env vars (THINGSDB, THINGS_AUTH_TOKEN) which are not declared as required metadata; these are used for DB path and authenticated updates — treat any auth token as sensitive. Recommended steps: install the 'things' binary yourself from the linked GitHub repo and inspect/rebuild it locally, avoid granting Full Disk Access to unknown gateway apps (use Terminal or a tightly controlled account), and if you must run via Clawdbot.app, review and limit that app's permissions and network access. If you want higher assurance, request the actual source/binaries and verify the code or run the binary in a confined environment first.

Type: OpenClaw Skill Name: things-mac-1-0-0 Version: 1.0.0 The skill bundle provides a legitimate interface for managing the Things 3 task manager on macOS using the open-source `things3-cli` tool. It includes standard installation instructions via `go install` from a public repository (github.com/ossianhempel/things3-cli) and provides clear documentation for the agent to read and update tasks. While it mentions the need for Full Disk Access, this is a documented requirement for the CLI tool to access the local SQLite database, and no evidence of malicious intent or data exfiltration was found.