Trust Assessment
todoist-api received a trust score of 83/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Potential for Command Injection via `td` CLI arguments, Unpinned dependency for `td` CLI installation.
The analysis covered 4 layers: manifest_analysis, llm_behavioral_safety, dependency_graph, static_code_analysis. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 11, 2026 (commit 326f2466). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential for Command Injection via `td` CLI arguments The skill instructs the agent to execute `td` CLI commands, many of which accept user-provided strings (e.g., task content, project names, labels) as arguments. If the agent directly interpolates untrusted user input into these shell commands without proper sanitization or escaping, a malicious user could inject arbitrary shell commands. The skill does not provide explicit instructions for sanitizing or escaping user input before command execution. Add explicit instructions for the agent to sanitize or properly escape all user-provided input before constructing and executing `td` CLI commands. Advise quoting arguments and using a safe execution mechanism that prevents shell metacharacter interpretation. | Unknown | SKILL.md:55 | |
| MEDIUM | Unpinned dependency for `td` CLI installation The skill instructs users to install the `@doist/todoist-cli` package using `npm install -g @doist/todoist-cli` without specifying a version. This means the latest version will always be installed, which could introduce breaking changes, vulnerabilities, or even malicious code if the package is compromised in the future. Pinning the dependency to a specific version is a security best practice. Recommend specifying a pinned version for the `npm` package installation, e.g., `npm install -g @doist/todoist-cli@X.Y.Z`, to ensure consistent and secure installations. | Unknown | SKILL.md:14 |
Scan History
Embed Code
[](https://skillshield.io/report/a489586042b3377a)
Powered by SkillShield