TickTick API integration with managed OAuth. Manage tasks, projects, and task lists. Use this skill when users want to create, update, complete, or organize tasks and projects in TickTick. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
Security Analysis
high confidenceThe skill's requirements and runtime instructions line up with its stated purpose (TickTick integration via the Maton API gateway); it only needs a Maton API key and makes network calls to Maton endpoints.
Name and description match the required resources: SKILL.md describes calling Maton gateway endpoints that proxy TickTick and the only required env var is MATON_API_KEY. The requested capability (managed OAuth via Maton) is consistent with the skill's stated purpose. Note: the registry lists no homepage and source is 'unknown' which reduces transparency but does not contradict functionality.
SKILL.md runtime instructions are limited to making HTTP requests to gateway.maton.ai and ctrl.maton.ai and directing the user to open the OAuth URL in a browser. The instructions do not ask the agent to read arbitrary local files, other environment variables, or transmit data to unexpected endpoints.
There is no install spec and no code files (instruction-only). That minimizes on-disk execution risk; the skill relies on built-in networking and the MATON_API_KEY environment variable.
The skill requires a single environment variable, MATON_API_KEY, which is appropriate for a gateway-based API integration. There are no unrelated secrets or multiple credential demands. As usual, the API key is sensitive and should be scoped and managed carefully.
always is false and the skill does not request system-wide configuration or persistent privileges. The default ability for the agent to call the skill autonomously is enabled (platform default) but is not excessive here given the narrow API scope.
Guidance
This skill appears coherent: it simply proxies TickTick calls through Maton's gateway and only needs MATON_API_KEY. Before installing, confirm you trust the Maton service (maton.ai) and the domains shown (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai). Treat MATON_API_KEY as a secret: ensure the key has the minimum permissions needed, rotate it if leaked, and do not paste it into untrusted places. Because the registry entry lacks a homepage/source, consider asking the publisher for a repository or more provenance if you require higher assurance. If you want to limit risk further, run the skill in an account whose TickTick/Maton permissions are intentionally constrained.
Latest Release
v1.0.2
- Added `clawdbot` metadata section with emoji and required environment variable (`MATON_API_KEY`) to SKILL.md. - No changes to functionality or API documentation; update is metadata-only.
More by @byungkyu
Published by @byungkyu on ClawHub
