todoist-api
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes task content, descriptions, and comments retrieved from the Todoist API. This data represents an ingestion surface for untrusted content that could potentially influence agent behavior. (Ingestion points: Todoist API responses in scripts/todoist_api.py; Capabilities: Network communication and file writing via --output; Boundary markers: None; Sanitization: Data is returned as structured JSON or summary text without content-level filtering for injection patterns).
- [SAFE]: The tool follows secure credential management practices by retrieving the Todoist API token from environment variables rather than hardcoding it. Additionally, the redact_headers function in scripts/todoist_api.py ensures that sensitive authentication tokens are removed from diagnostic and request-preview outputs.
Audit Metadata