Is flexoid/ticktick-full safe?
Yes. flexoid/ticktick-full is safe to install. Oathe's behavioral security audit gave the ticktick-full skill by flexoid a trust score of 96/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/flexoid/ticktick-full
Is flexoid/ticktick-full safe to install?
This is a documentation-only skill that provides instructions for using the TickTick CLI tool. It contains only markdown reference files with no executable code, scripts, or suspicious network behavior.
What security issues were found in flexoid/ticktick-full?
Category Scores
Findings (2)
LOW Instructs to bypass pre-checks -10 ▶
The skill instructs the agent to 'Execute the requested ticktick ... command first. Do not run version or tool-presence pre-checks.' While this is within the legitimate scope of a CLI wrapper, it does override normal safety validation procedures.
INFO Requires API credentials -10 ▶
The skill requires TickTick API credentials and user credentials to be stored in environment variables. While this is normal for CLI authentication, it does involve handling sensitive data.
Should I install flexoid/ticktick-full?
Oathe's verdict for flexoid/ticktick-full is SAFE with a trust score of 96/100. Recommendation: Install.