ticktick
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npx @useclawlink/cli. These commands are used for authenticating with the service, connecting to Ticktick, and performing task management actions. - [EXTERNAL_DOWNLOADS]: The use of
npxinvolves downloading the@useclawlink/clipackage from the official npm registry at runtime. This is a standard distribution method for the tool provided by the skill's author. - [DATA_EXPOSURE]: The skill notes that credentials are stored locally at
~/.clawlink/credentials.json. While this is a sensitive file path, it is the standard configuration directory for the CLI tool to maintain user sessions and does not involve unauthorized exfiltration.
Audit Metadata