Todoist Task Manager

Manage Todoist tasks via the `todoist` CLI (list, add, modify, complete, delete). Supports filters, projects, labels, and priorities.

This skill appears to do what it says: it uses the todoist-cli to manage tasks. Before installing, check the Homebrew formula source (and the linked GitHub repo) to ensure the CLI is the official project. Be aware that the SKILL.md tells you to store your Todoist API token in ~/.config/todoist/config.json (plain JSON) and that the CLI also keeps a cache at ~/.config/todoist/cache.json—these files contain your token and local data, so store them only on trusted machines. If you want to limit risk: create a dedicated Todoist API token with minimal scope (if possible), keep a backup plan to revoke the token, and avoid enabling autonomous agent use of the skill unless you trust the agent and environment. Finally, consider inspecting the todoist-cli code (or Homebrew formula) if you need higher assurance that the installed binary behaves as expected.

Type: OpenClaw Skill Name: todoist-task-manager Version: 1.0.0 The skill bundle is benign. It provides instructions and metadata for managing Todoist tasks using the `todoist` CLI. The `SKILL.md` file details standard installation via Homebrew, configuration steps involving local storage of an API token in `~/.config/todoist/config.json` (necessary for the tool's function), and various `todoist` CLI commands. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent for harmful purposes. All actions are clearly aligned with the stated purpose of a Todoist task manager.