Agent Economy ReportAgent Economy ReportCAUTION version 0.2.1 · audited 2026-09-17
This package is documentation and setup instructions for using a third-party Todoist CLI. It directs an agent to install a global npm package, authenticate with a Todoist API token, and run commands that read, create, update, complete, move, and delete Todoist tasks, projects, labels, and comments. The observed behavior matches the declared Todoist task-management purpose, and no hidden destinations, obfuscation, persistence, or payment redirection were found. The main reasons for caution are that it installs an unpinned external package globally and needs a live Todoist API token.
| Declared purpose | Manage tasks and projects in Todoist. Use when user asks about tasks, to-dos, reminders, or productivity. |
| Observed behavior | The package consists of metadata and markdown instructions. It tells the agent to install the npm package todoist-ts-cli@^0.2.0, set up a Todoist API token, and use the todoist CLI to list, add, view, complete, reopen, update, move, delete, and search tasks; it also covers projects, labels, and comments. It contains no executable script beyond shell examples. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| shell | needed | The skill is a set of bash shell command examples invoking npm and the todoist CLI. |
| network | needed | The todoist CLI will connect to Todoist APIs; setup links to todoist.com are provided. |
| credentials | needed | The skill requires TODOIST_API_TOKEN or a token stored via todoist auth to access the user's Todoist account. |
| install_packages | needed | The setup requires installing the external npm package todoist-ts-cli globally with a semver range. |
| severity | finding |
|---|---|
| info | Declared purpose This description matches the command examples in the rest of the file. SKILL.md:3 description: Manage tasks and projects in Todoist. Use when user asks about tasks, to-dos, reminders, or productivity. |
| medium | Requires Todoist API token The skill declares a requirement for a live Todoist API token, which gives the CLI account access. SKILL.md:10 env: ["TODOIST_API_TOKEN"] |
| medium | Global install of unpinned external package The setup installs a third-party npm package globally using a floating semver range (^0.2.0), so future 0.x versions may be pulled without review. SKILL.md:21 npm install -g todoist-ts-cli@^0.2.0 |
| medium | Token may be stored by CLI The alternative setup passes the Todoist token to the CLI, which may store it locally; exposure should be avoided. SKILL.md:29 todoist auth <your-token> |
| low | Environment variable token setup Typing the token in a shell can place it in shell history; the skill card also notes this risk. SKILL.md:31 export TODOIST_API_TOKEN="your-token" |
| low | Destructive task deletion The CLI can delete tasks; task IDs should be verified before executing this command. SKILL.md:67 todoist delete <id> |
| info | Published risk disclosure The skill card acknowledges the token access risk and recommends using the token only in trusted environments. skill-card.md:24 Risk: The skill requires CLI access to a Todoist account through TODOIST_API_TOKEN. |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:9 |
| todoist.com | not in the service index | SKILL.md:4 |
| Binaries invoked | bash, npm |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 1 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 139 | 56960995964fa8cf… |
_meta.json | 6 | d444fb6327052342… |
skill-card.md | 58 | 5f86cc02337b0404… |
For agents
JSON: https://agenteconomy.report/k/todoist.audit.json · badge: https://agenteconomy.report/k/todoist.audited.svg ·
skill rating: /k/todoist · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).