Trust Assessment
ticktick received a trust score of 76/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 3 findings: 0 critical, 1 high, 1 medium, and 1 low severity. Key findings include Unpinned npm dependency version, Node lockfile missing, Sensitive credentials stored in plaintext.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Sensitive credentials stored in plaintext The skill stores TickTick OAuth `client_id`, `client_secret`, `access_token`, and `refresh_token` in plaintext within `~/.clawdbot/credentials/ticktick-cli/config.json`. While the skill attempts to set restrictive file permissions (0o600 for the file, 0o700 for the directory), plaintext storage is inherently insecure and vulnerable to local attackers or misconfigurations. Any process with read access to this file could exfiltrate these credentials. Implement encryption for sensitive credentials at rest, or integrate with a secure credential manager (e.g., OS keyring, environment variables for `client_id`/`client_secret` and a secure store for tokens). Avoid storing `client_secret` on disk if possible, or prompt for it at runtime. | LLM | SKILL.md:140 | |
| MEDIUM | Unpinned npm dependency version Dependency 'commander' is not pinned to an exact version ('^12.0.0'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/manuelhettich/ticktick/package.json | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/manuelhettich/ticktick/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/5ee1aab3ae6b98a8)
Powered by SkillShield