Mcp Omnifocus — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Omnifocus (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for OmniFocus with auto-detection of Pro/Standard version.
| Feature | Pro (AppleScript) | Standard |
|---|---|---|
| Read tasks | ✓ | ✓ (SQLite) |
| Create task | ✓ | ✓ (URL scheme, syncs) |
| Update task | ✓ | ⚠️ (SQLite, no sync) |
| Complete task | ✓ | ⚠️ (SQLite, no sync) |
| Get projects | ✓ | ✓ (SQLite) |
⚠️ Standard SQLite write: Changes don't sync until OmniFocus restart.
npx mcp-omnifocusgit clone https://github.com/avlihachev/mcp-omnifocus.git
cd mcp-omnifocus
npm install
npm run buildAdd to ~/.claude/claude_desktop_config.json:
{
"mcpServers": {
"omnifocus": {
"command": "npx",
"args": ["mcp-omnifocus"]
}
}
}Or if installed from source:
{
"mcpServers": {
"omnifocus": {
"command": "node",
"args": ["/path/to/mcp-omnifocus/dist/index.js"]
}
}
}Get tasks filtered by flagged, due today, or all.
Create a new task with name, note, project, flagged, dueDate.
Update existing task (Pro: syncs, Standard: SQLite only).
Mark task as complete (Pro: syncs, Standard: SQLite only).
Get list of active projects.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.