The Agent Skills Directory

[PROMPT_INJECTION]: Indirect Prompt Injection Surface.
Ingestion points: The skill retrieves user-controlled task titles, descriptions, and project names from the TickTick API in scripts/api.ts (e.g., getProjectData, getAllTasks).
Boundary markers: No delimiters or specific instructions are provided to the agent to treat API-retrieved content as untrusted data.
Capability inventory: The skill has the capability to create, update, and delete tasks and projects via the TickTick API as defined in scripts/api.ts.
Sanitization: External task content is used directly in terminal output and JSON responses without sanitization or validation.
[EXTERNAL_DOWNLOADS]: Official API Communication.
The skill communicates with official TickTick domains (https://api.ticktick.com and https://ticktick.com/oauth) for authentication and task synchronization.
Evidence: Network request logic is encapsulated in scripts/api.ts and scripts/auth.ts. This represents standard functionality for a task management tool.
[DATA_EXFILTRATION]: Local Configuration Storage.
The skill creates and accesses a sensitive configuration file at ~/.clawdbot/credentials/ticktick-cli/config.json to store OAuth2 client credentials and access tokens.
Evidence: scripts/auth.ts implements restricted file permissions (0o600 for the configuration file and 0o700 for the directory) to mitigate the risk of unauthorized local access to the stored credentials.

ticktick