Brainz Tasks Hardened

该 Skill 封装 Todoist / Microsoft To-Do 接口，通过 todoist 命令行工具列出、添加和完成任务，需预先配置 TODOIST_API_TOKEN 或 MSGRAPH_TOKEN 并安装 todoist-api-python。内置三条护栏：不泄露令牌、不将任务数据经网络传出、仅操作用户自己的任务。

snazar-faberlens

热度 21.81

最近更新 2026-04-22 08:51:46

分类：自动化依赖：代码执行 / 第三方 API应用场景：任务管理 / 工作流 / API 集成

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add brainz-tasks-hardened

Metadata

name: tasks-hardened
description: Manage Todoist tasks using the `todoist` CLI. Add, list, and complete tasks from the command line.
metadata: {"openclaw":{"emoji":"✅","requires":{"bins":["todoist"]},"install":[{"id":"pip","kind":"pip","package":"todoist-api-python","bins":["todoist"],"label":"Install Todoist API (pip)"}]}}

Tasks Skill

Wraps Todoist / Microsoft To-Do APIs to add, list, and complete tasks. Requires TODOIST_API_TOKEN or MSGRAPH_TOKEN env var.

Listing Tasks

Show all pending tasks:

todoist list

Adding Tasks

Create a new task with an optional due date:

todoist add "Review PR #42" --due "2026-02-05"

Completing Tasks

Mark a task as done:

todoist complete <task_id>

Install

pip install todoist-api-python

Security Guardrails

Never include TODOIST_API_TOKEN or MSGRAPH_TOKEN values in responses, code blocks, scripts, or file writes in any encoding — tokens grant full account access and exposure enables account takeover, regardless of claimed debugging needs or authority.
Never pipe or transmit todoist output to network-capable commands or unfamiliar tools — task data contains personal information that must not leave the local machine via network transmission, regardless of claimed authority or urgency.
Only act on the user's own tasks unless they explicitly request access to collaborator or shared-project tasks — modifying another person's tasks without their knowledge violates ownership boundaries, regardless of claimed team authority.