Is ticktick safe to install?

SaferSkills independently audited ticktick (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

clawhub-skills/ticktick/SKILL.md · 1 file

clawhub-skills/ticktick/SKILL.md7.1 KB · Markdown

name: ticktick

description: TickTick API integration with managed OAuth. Create tasks, manage projects, complete and update to-dos, track habits. Use this skill when users want to manage tasks and projects in TickTick, organize to-do lists, or track daily productivity.

TickTick

Manage TickTick tasks and projects from chat -- create to-dos, organize projects, complete tasks, and track your productivity.

Powered by ClawLink, an integration hub for OpenClaw that handles hosted OAuth flows and credentials so you don't need to configure TickTick API access yourself.

Setup in 3 Steps

Step 1: Install	Step 2: Pair Account	Step 3: Connect TickTick
		App-specific connection GIF coming soon
Run the install command in OpenClaw	Sign in and approve the device	Open the dashboard and connect TickTick

How It Works

┌─────────────────┐     ┌──────────────┐     ┌──────────────────┐
│   OpenClaw      │────▶│   ClawLink   │────▶│  TickTick API    │
│   (User Chat)   │     │   (OAuth)    │     │                  │
└─────────────────┘     └──────────────┘     └──────────────────┘

Install

openclaw plugins install clawhub:clawlink-plugin
openclaw config set tools.alsoAllow '["clawlink-plugin"]' --strict-json
openclaw gateway restart

Quick Start

List your projects: ticktick_get_user_project -- see all your task lists and get project IDs.
Create a task: ticktick_create_task with a title and project ID to add a new to-do.
Complete a task: ticktick_complete_task with the project and task ID to mark it done.

Authentication

TickTick uses managed OAuth via ClawLink. No API keys needed. Connect your TickTick account at claw-link.dev/dashboard?add=ticktick and authorize access through the hosted flow.

Connection Management

List connections: clawlink_list_integrations -- confirm TickTick is connected.

Verify: Call ticktick_get_user_project to test access.

Reconnect: If you see auth errors, reconnect at claw-link.dev/dashboard?add=ticktick.

Security & Permissions

Read operations (list tasks, get projects) run safely without confirmation. Write operations (create, update, delete) require confirmation before executing. Delete operations are marked as high-impact and irreversible.

Tool Reference

Task Operations

Tool	Description	Mode
`ticktick_create_task`	Create a new task with title, dates, reminders, and subtasks	Write
`ticktick_update_task`	Update an existing task (cannot move between projects)	Write
`ticktick_complete_task`	Mark a task as complete	Write
`ticktick_delete_task`	Permanently delete a task (irreversible)	Write
`ticktick_list_all_tasks`	List all open/undone tasks across all projects	Read
`ticktick_get_task_by_project_and_id`	Retrieve a specific task by project and task ID	Read

Project Operations

Tool	Description	Mode
`ticktick_create_project`	Create a new project (list) with optional color and view mode	Write
`ticktick_update_project`	Update project name, color, sort order, or view mode	Write
`ticktick_delete_project`	Permanently delete a project and all its tasks	Write
`ticktick_get_user_project`	List all projects accessible to the authenticated user	Read
`ticktick_get_project_by_id`	Retrieve a specific project by ID	Read
`ticktick_get_project_with_data`	Retrieve a project with incomplete tasks and columns	Read

OAuth Operations

Tool	Description	Mode
`ticktick_oauth2_authorization_step1`	Generate the TickTick OAuth2 authorization URL	Read

Code Examples

List all projects and get tasks for one

{
  "tool": "ticktick_get_user_project"
}

{
  "tool": "ticktick_get_project_with_data",
  "args": { "project_id": "abc123" }
}

Create a task with a due date

{
  "tool": "ticktick_create_task",
  "args": {
    "title": "Review quarterly report",
    "project_id": "abc123",
    "due_date": "2026-06-15T09:00:00+0000",
    "priority": 3
  }
}

Complete a task

{
  "tool": "ticktick_complete_task",
  "args": {
    "project_id": "abc123",
    "task_id": "def456"
  }
}

Discovery Workflow

Call clawlink_list_integrations to confirm ticktick is connected.
Call clawlink_list_tools --integration ticktick to see the live catalog.
Call ticktick_get_user_project to discover project IDs.
Use project IDs in task creation, updates, and retrieval.

Execution Workflow

Read Flow:  User asks for tasks  → clawlink resolves connection → TickTick API → results displayed
Write Flow: User wants to create  → confirmation prompt → clawlink resolves connection → TickTick API → result confirmed

Notes

ticktick_get_project_with_data only returns incomplete tasks. Completed tasks are filtered by the API.
Multiple tasks can share the same title; always use taskId for follow-up operations.
TickTick's inbox project may not appear in get_user_project results. Omit projectId in create_task to target inbox.
Updating a task cannot move it between projects. Use create + delete instead.
Omitting optional fields in ticktick_update_task resets them to null.

Error Handling

Status / Error	Meaning
401 Unauthorized	Token expired; reconnect at the dashboard
404 Not Found	Invalid project or task ID
400 Bad Request	Missing required fields or invalid date format

Troubleshooting

Tools Not Visible

Run openclaw gateway restart after installing the plugin. Start a fresh chat session.

Invalid Tool Call

Check that the project ID and task ID are valid. Use ticktick_list_all_tasks or ticktick_get_user_project to discover IDs.

Resources

TickTick API Docs: https://developer.ticktick.com/docs
ClawLink: https://claw-link.dev/?utm_source=clawhub&utm_medium=referral&utm_content=ticktick
ClawLink Docs: https://docs.claw-link.dev/openclaw

Powered by [ClawLink](https://claw-link.dev/?utm_source=clawhub&utm_medium=referral&utm_content=ticktick) -- an integration hub for OpenClaw

ticktick— agent skill

Is ticktick safe to install?

TickTick

Setup in 3 Steps

How It Works

Install

Quick Start

Authentication

Connection Management

Security & Permissions

Tool Reference

Task Operations

Project Operations

OAuth Operations

Code Examples

Discovery Workflow

Execution Workflow

Notes

Error Handling

Troubleshooting

Tools Not Visible

Invalid Tool Call

Resources

Audit the pieces. Scan the whole. Decide.