← 返回 Skills 市场
Todoist API
作者
Tristan Manchester
· GitHub ↗
· v1.0.0
283
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install todoist-api-skill
功能描述
Manages Todoist tasks, projects, sections, labels, comments, completed-task reports, activity logs, ID migration, project templates, and sync workflows throu...
安全使用建议
This skill appears to be a legitimate Todoist API helper, but take these precautions before installing or running it: 1) The scripts expect a Todoist token (TODOIST_API_TOKEN / TODOIST_TOKEN) even though the registry metadata doesn't declare one — do not provide your token unless you trust the source. 2) Inspect scripts/todoist_api.py and smoke_test.py yourself (they are included) to confirm there are no unexpected network endpoints; the code defaults to api.todoist.com but allows --base-url (avoid pointing that to unknown hosts). 3) Run the read-only smoke_test first in an isolated environment with a token of limited scope or a throwaway account to verify behavior. 4) Prefer using --dry-run and --confirm for any write/bulk operations. 5) Ask the publisher to correct the registry metadata to list TODOIST_API_TOKEN (or make the credential requirement explicit) before installing in production. If you cannot verify these points, treat the skill as unsafe to receive your real Todoist token.
功能分析
Type: OpenClaw Skill
Name: todoist-api-skill
Version: 1.0.0
The todoist-api skill bundle is a comprehensive and well-documented tool for managing Todoist data via its official API. The core logic in scripts/todoist_api.py and scripts/smoke_test.py uses standard Python libraries (urllib, json) to interact exclusively with api.todoist.com, with clear safety mechanisms like mandatory --dry-run or --confirm flags for destructive operations. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The skill's name, description, and included scripts clearly target the Todoist REST API and the required capabilities (task/project/label management) match the code. However, the registry metadata lists no required environment variables or primary credential while both SKILL.md and the scripts expect a Todoist API token (TODOIST_API_TOKEN or TODOIST_TOKEN). This mismatch is incoherent: a Todoist integration legitimately needs an API token and the registry should declare that.
Instruction Scope
Runtime instructions and scripts stay within the Todoist API domain: they use api.todoist.com, support dry-run/confirm semantics, and the 'raw' and 'sync' escape hatches are documented. The CLI accepts --base-url which can point to an alternate host: this is a legitimate testing/compatibility feature but could be abused to send tokens to a non-Todoist endpoint if misused. The instructions do not ask for unrelated system files or unrelated credentials.
Install Mechanism
No install spec is provided (instruction-only with bundled Python scripts). Nothing is downloaded at install time; risk from install mechanism is low. The presence of code files means the code will run on the host, so the user should review the included scripts before executing.
Credentials
The skill legitimately requires a single Todoist API token (TODOIST_API_TOKEN or TODOIST_TOKEN), which is proportionate to its purpose. The concern is that the registry metadata does not declare this required credential (required env vars: none, primary credential: none), creating an information gap and increasing the chance a user might unwittingly expose secrets. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request persistent/always-on inclusion (always: false) and does not modify other skills or system-wide settings. Autonomous invocation is enabled (platform default) but not combined with other broad privileges here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install todoist-api-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/todoist-api-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial public release with CLI and references for robust Todoist automation.
- Adds a command-line Todoist API client (scripts/todoist_api.py) with coverage for core resources, bulk/batched operations, and safe-agent workflows.
- Includes smoke test for read-only connectivity (scripts/smoke_test.py).
- Provides detailed user and agent documentation: reference, recipes, and gotchas for real-world Todoist automation.
- Features name resolution, dry-run/confirm modes, and bulk operation safety defaults.
- Supports output in JSON or summary format, with optional file output for large results.
- Assets for sync and review templates included for advanced Todoist workflows.
元数据
常见问题
Todoist API 是什么？
Manages Todoist tasks, projects, sections, labels, comments, completed-task reports, activity logs, ID migration, project templates, and sync workflows throu... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 283 次。
如何安装 Todoist API？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install todoist-api-skill」即可一键安装，无需额外配置。
Todoist API 是免费的吗？
是的，Todoist API 完全免费（开源免费），可自由下载、安装和使用。
Todoist API 支持哪些平台？
Todoist API 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Todoist API？
由 Tristan Manchester（@tristanmanchester）开发并维护，当前版本 v1.0.0。
推荐 Skills