todos — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited todos (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
List, create, edit, complete, and replan todos using Aicoo OS endpoints.
AICOO_API_KEY must be set (falls back to PULSE_API_KEY)https://www.aicoo.io/api/v1| Endpoint | Method | Purpose |
|---|---|---|
/os/todos | GET | List/search todos |
/os/todos | POST | Create a todo |
/os/todos/{id} | PATCH | Edit a todo |
/os/todos/{id}/complete | POST | Mark todo complete |
/os/todos/replan | POST | Replan overdue todos |
# All incomplete todos
curl -s "https://www.aicoo.io/api/v1/os/todos?limit=20&completed=false" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" | jq .
# Search by keyword
curl -s "https://www.aicoo.io/api/v1/os/todos?q=investor&limit=20" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" | jq .
# Filter by priority (1=highest)
curl -s "https://www.aicoo.io/api/v1/os/todos?priority=1&limit=10" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" | jq .
# Include completed
curl -s "https://www.aicoo.io/api/v1/os/todos?completed=true&limit=50" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" | jq .curl -s -X POST "https://www.aicoo.io/api/v1/os/todos" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" \
-H "Content-Type: application/json" \
-d '{"title":"Prepare investor packet","priority":1}' | jq .Fields:
title (required): task descriptionpriority (optional): 1 (highest) to 4 (lowest)dueDate (optional): ISO 8601 date stringnotes (optional): additional contextcurl -s -X PATCH "https://www.aicoo.io/api/v1/os/todos/42" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" \
-H "Content-Type: application/json" \
-d '{"title":"Updated title","priority":2,"dueDate":"2026-05-10"}' | jq .curl -s -X POST "https://www.aicoo.io/api/v1/os/todos/42/complete" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" | jq .Reschedule overdue items intelligently:
curl -s -X POST "https://www.aicoo.io/api/v1/os/todos/replan" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" \
-H "Content-Type: application/json" \
-d '{}' | jq .When the user has a local todo list (markdown, text file, etc.) and wants it in Aicoo:
/os/todos with appropriate priority and due dateWhen listing todos, group by status and priority:
Pending (5 items)
P1: Prepare investor packet (due May 5)
P1: Fix production auth bug
P2: Review PR #280
P3: Update onboarding docs
P4: Clean up old branches
Completed today (2 items)
Done: Deploy guest identity fix
Done: Write LLM judge docs~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.