Todoist Project Automator
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's installation process utilizes
npx -y mcp-remoteto fetch and execute configuration fromhttps://ai.todoist.net/mcp. This domain is an official service endpoint for the vendor's AI integration. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to sync with external project trackers, which serves as an ingestion point for untrusted data.
- Ingestion points: Data fetched from external project trackers during synchronization tasks.
- Boundary markers: None explicitly defined in the provided markdown instructions.
- Capability inventory: The skill can create task templates, manage recurring workflows, and perform sync operations via the Todoist REST and Sync APIs.
- Sanitization: No specific sanitization or filtering logic is described for the content received from external trackers.
Audit Metadata