← 返回 Skills 市场
1717
总下载
1
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install ticktick-tasks
功能描述
TickTick task manager integration. List projects and tasks, create new tasks, complete tasks, delete tasks. Use when the user wants to manage their to-do list, add reminders, check pending tasks, or mark tasks as done. Requires OAuth setup via `ticktick-setup`.
安全使用建议
Before installing or using this skill: 1) Understand the mismatch — the skill's instructions require a 'ticktick' CLI and an OAuth client_id/client_secret, but the package metadata lists no binaries or credentials. 2) Do not run or install any third-party 'ticktick-setup' binary unless you can verify its source (official repo, GitHub release, or vendor). 3) Ask the skill publisher for the origin of the CLI and for an explicit install spec and token storage policy (where access tokens/client secrets are saved and who can read them). 4) If you must provide client_secret or paste a callback URL, ensure you trust the tool and inspect its code or release artifacts; avoid pasting secrets into untrusted prompts. 5) If you cannot verify the CLI, decline to install the skill — the skill as published is incomplete and cannot be safely vetted.
功能分析
Type: OpenClaw Skill
Name: ticktick-tasks
Version: 1.0.0
The skill bundle describes a TickTick task manager integration. The `_meta.json` file contains standard metadata. The `SKILL.md` file provides setup instructions for OAuth, requiring `client_id` and `client_secret` to be passed to an external `ticktick-setup` command (whose code is not provided in this bundle). It also details usage examples and API references pointing to the legitimate `https://api.ticktick.com/open/v1` domain. There is no evidence of prompt injection, malicious execution, data exfiltration, persistence mechanisms, or obfuscation within the provided files. The instructions are clearly aligned with the stated purpose of managing TickTick tasks.
能力评估
Purpose & Capability
The SKILL.md repeatedly instructs the agent/user to run a 'ticktick-setup' command and to use a 'ticktick' CLI (e.g., ticktick projects, ticktick add), and it requires creating a TickTick app (client_id/client_secret). However the skill metadata declares no required binaries, no primary credential, and no required env vars or config paths. That is an explicit inconsistency: a TickTick integration plausibly needs OAuth credentials and a client binary or library, but the skill does not declare or provide them.
Instruction Scope
The instructions themselves stay within TickTick API usage (creating tasks, listing projects, completing tasks) and the OAuth flow is standard (create app, redirect URI, authorize). The concerning part is that the instructions require interactive steps (running ticktick-setup, opening a browser, pasting a callback URL) and the skill gives no guidance about where 'ticktick-setup' comes from or how tokens are stored. There is no instruction to read unrelated files or exfiltrate data, but the lack of provenance for the external CLI raises risk.
Install Mechanism
This is an instruction-only skill with no install spec and no code files (lowest install risk). However, the runtime depends on an external CLI ('ticktick' and 'ticktick-setup') that is neither provided nor referenced by a trusted install source. The absence of an install mechanism for that CLI is a gap: the skill cannot function as described unless the user/agent obtains that binary from elsewhere, so you should verify its source before running.
Credentials
The SKILL.md requires creating a TickTick app and supplying client_id and client_secret to ticktick-setup, but the skill metadata declares no required credentials or primaryEnv. Sensitive credentials are therefore implicitly needed but not declared; that mismatch prevents automated vetting and is disproportionate to the declared requirements. You should confirm how/where OAuth tokens and client secrets will be stored and who (which process) will have access.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It is user-invocable and allows autonomous invocation (platform default), which is expected for skills. There is no explicit persistence or elevated privilege requested in the metadata.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install ticktick-tasks - 安装完成后,直接呼叫该 Skill 的名称或使用
/ticktick-tasks触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: OAuth setup, task CRUD, project listing
元数据
常见问题
TickTick Tasks 是什么?
TickTick task manager integration. List projects and tasks, create new tasks, complete tasks, delete tasks. Use when the user wants to manage their to-do list, add reminders, check pending tasks, or mark tasks as done. Requires OAuth setup via `ticktick-setup`. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1717 次。
如何安装 TickTick Tasks?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ticktick-tasks」即可一键安装,无需额外配置。
TickTick Tasks 是免费的吗?
是的,TickTick Tasks 完全免费(开源免费),可自由下载、安装和使用。
TickTick Tasks 支持哪些平台?
TickTick Tasks 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 TickTick Tasks?
由 hikaio(@kaiofreitas)开发并维护,当前版本 v1.0.0。
推荐 Skills