Is buddyh/todoist-cli safe?
Yes. buddyh/todoist-cli is safe to install. Oathe's behavioral security audit gave the todoist-cli skill by buddyh a trust score of 97/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/buddyh/todoist-cli
Is buddyh/todoist-cli safe to install?
This skill provides clean documentation for a legitimate Todoist CLI tool with no malicious behavior detected. It requires an API token for authentication but this is for legitimate interaction with the Todoist service.
What security issues were found in buddyh/todoist-cli?
Category Scores
Findings (3)
LOW Requires API Token -5 ▶
Skill requires TODOIST_API_TOKEN environment variable for authentication to Todoist service
INFO External Authentication URL -5 ▶
References external URL for obtaining API token, but it points to legitimate Todoist developer settings
INFO Credential Dependency -5 ▶
Skill functionality depends on user providing sensitive API credentials
Should I install buddyh/todoist-cli?
Oathe's verdict for buddyh/todoist-cli is SAFE with a trust score of 97/100. Recommendation: Install.