ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      bastos

      Safety Report

      topydo

      @bastos

      Manage todo.txt tasks using topydo CLI. Add, list, complete, prioritize, tag, and organize tasks with dependencies, due dates, recurrence, and projects. Use for any task management, todo lists, or when the user mentions tasks, todos, or todo.txt. Requires Python 3 and pip. Works on macOS, Linux, and Windows.

      2,271Downloads
      2Installs
      1Stars
      6Versions
      File Management2,100CLI & Shell Tools1,805Project Management1,537Networking & DNS1,102

      Security Analysis

      medium confidence
      Clean0.04 risk

      The skill is an instruction-only wrapper for the topydo CLI and its runtime instructions, file access, and install suggestions are coherent with a todo.txt task manager — but the package source/homepage is not provided, so verify upstream before installing anything it recommends.

      Feb 11, 20261 files1 concern
      Purpose & Capabilityok

      The name/description (topydo CLI for todo.txt) matches the runtime instructions: commands for add/ls/do/pri/tag/dep/etc. There are no unrelated credentials or binaries requested.

      Instruction Scopenote

      Instructions tell the agent (user) to run the topydo CLI and to read/edit todo config and todo files (e.g., ~/.topydo, ~/todo.txt, /etc/topydo.conf). This is expected for a task manager but does mean the skill will operate on user files and may open an editor or write archive files.

      Install Mechanismok

      The skill is instruction-only (no install spec). It suggests standard install methods (brew, pip, apt). That is low-risk for the skill itself, but installing third-party packages via pip/brew should be verified because the skill's registry entry lacks a homepage or source URL.

      Credentialsok

      No environment variables or credentials are requested. The instruction set references local config paths and the user’s todo files (appropriate for purpose).

      Persistence & Privilegeok

      always is false and the skill is user-invocable; it does not request persistent system privileges or modify other skills. Normal autonomous invocation is allowed by platform defaults.

      Guidance

      This skill is just documentation for using the topydo CLI and is internally consistent with that purpose. Before following its install suggestions: 1) verify the topydo package/source (homepage or repository) — the skill metadata doesn't include one; 2) prefer installing from trusted package sources (official brew formula, PyPI package with a known maintainer) and inspect the package if you have doubts; 3) be aware topydo will read/write files like ~/todo.txt, ~/.topydo, and /etc/topydo.conf and may open your editor or create output files (e.g., deps.png) — back up sensitive todo data if needed; 4) avoid running pip install commands with sudo unless you trust the package; 5) if you want higher assurance, inspect the topydo project's source repository before installing. Overall the skill is coherent with its stated purpose, but verify upstream before executing installs.

      Latest Release

      v1.0.5

      - Updated skill metadata to include author and version info; moved requirements into the description. - No functional skill changes detected.

      More by @bastos

      Conventional Commits

      3 stars

      Obsidian Daily

      0 stars

      pass - stores, retrieves, generates, and synchronizes passwords securely

      0 stars

      self-improving-agent

      @pskoett · 1,456 stars

      Gog

      @steipete · 672 stars

      Tavily Web Search

      @arun-8687 · 620 stars

      Published by @bastos on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]