技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 1 · 1.8k · 7 current installs · 7 all-time installs
⭐ 1
安装量（当前） 7
🛡 VirusTotal ：良性 · OpenClaw ：良性
Package：addozhang/google-tasks
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：良性
OpenClaw 评估
The skill's files and instructions are consistent with a Google Tasks integration: it uses local OAuth credentials and token files, talks only to Google endpoints, and the requested footprint is proportional to its stated purpose.
目的
The skill name/description match the implementation: scripts call the Google Tasks REST API and perform create/list/delete operations. Minor incoherence: the registry metadata declares no required binaries/env, but SKILL.md and the scripts require curl, jq and (for the auth helpers) Node.js or Python and a local credentials.json/token.json. package.json lists google-auth-library and googleapis, yet there is no automated install spec — this is …
说明范围
SKILL.md instructs the agent to run local bash/node/python scripts, open a browser for OAuth, and store token.json in the workspace root. The runtime behavior is limited to reading/writing credentials.json and token.json and calling Google endpoints (accounts.google.com, oauth2.googleapis.com, tasks.googleapis.com). There are no hidden external endpoints, obfuscated code, or instructions to read unrelated system files.
安装机制
There is no install spec in the registry (instruction-only), which is low risk. The repo contains package.json dependencies for Node; the README suggests running npm install, but there's no automated installer. All code is local and uses standard, well-known hosts (Google). No downloads from untrusted URLs or extract semantics were found.
证书
The skill requests no environment variables, and it uses local credential files (credentials.json and token.json) rather than injected secrets — this is proportionate to a Google OAuth flow. Users should note that token.json contains access/refresh tokens and credentials.json contains client_id/secret; both are sensitive and must be protected (the project includes a .gitignore entry for them).
持久
always is false and the skill does not request system-wide privileges. It writes only its own token.json in the workspace root and starts a temporary local HTTP server for the OAuth redirect (port 3000). It does not modify other skills or global agent settings.
综合结论
This skill appears to do what it says, but before installing or running it: 1) Review and never commit credentials.json or token.json — these contain your client secret and tokens. 2) Run npm install (or otherwise install Node/Python) before using the Node/Python auth helpers; inspect package.json dependencies. 3) The auth flow starts a local HTTP server (port 3000) and opens your browser to complete OAuth — ensure that behavior is acceptable.…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Google Tasks」。简介：Fetch, display, create, and delete Google Tasks using the Google Tasks API. Use…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/addozhang/google-tasks/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: google-tasks
version: 1.0.0
description: Fetch, display, create, and delete Google Tasks using the Google Tasks API. Use when the user asks to check, view, list, get, add, create, remove, or delete their Google Tasks, to-do lists, or task items. Handles OAuth authentication automatically using bash script with curl and jq.
author: OpenClaw Community
keywords: [google-tasks, tasks, todo, productivity, bash, oauth]
license: MIT
---
# Google Tasks Skill
Manage Google Tasks from all task lists using lightweight bash scripts.
## Quick Start
### View tasks
```bash
bash scripts/get_tasks.sh
```
### Create a task
```bash
# Using default list (configured in google-tasks-config.sh)
bash scripts/create_task.sh "Task title" ["due-date"] ["notes"]
# Specifying list name
bash scripts/create_task.sh "List Name" "Task title" ["due-date"] ["notes"]
```
Examples:
```bash
# Simple task (uses default list)
bash scripts/create_task.sh "Buy groceries"
# Task with due date (uses default list)
bash scripts/create_task.sh "Finish report" "2026-02-10"
# Task with specific list
bash scripts/create_task.sh "Work" "Finish report" "2026-02-10"
# Task with list, due date, and notes
bash scripts/create_task.sh "Personal" "Call mom" "2026-02-05" "Ask about her health"
```
**Default list configuration:**
Edit `google-tasks-config.sh` to set your default list:
```bash
DEFAULT_LIST="Private" # Change to your preferred default
```
### Delete a task
```bash
bash scripts/delete_task.sh "List Name" <task-number-or-title>
```
Examples:
```bash
# Delete by task number (position in list)
bash scripts/delete_task.sh "Work" 2
# Delete by task title
bash scripts/delete_task.sh "Inbox" "Buy groceries"
```
## Requirements
- `jq` - JSON processor (usually pre-installed)
- `curl` - HTTP client (usually pre-installed)
- Valid `token.json` with OAuth access token
- **Scopes required:** `https://www.googleapis.com/auth/tasks` (read + write)
## First-Time Setup
If `token.json` doesn't exist:
1. User needs OAuth credentials (`credentials.json`) - See [setup.md](references/setup.md)
2. Run the Node.js authentication flow first to generate `token.json`
3. Then the bash script can be used for all subsequent calls
## Output Format
```
📋 Your Google Tasks:
📌 List Name
──────────────────────────────────────────────────
1. ⬜ Task title (due: YYYY-MM-DD)
Note: Task notes if present
2. ⬜ Another task
📌 Another List
──────────────────────────────────────────────────
(no tasks)
```
## File Locations
- `token.json` - Access/refresh tokens (workspace root)
- `google-tasks-config.sh` - Configuration file (default list setting)
- `scripts/get_tasks.sh` - Bash script to view tasks
- `scripts/create_task.sh` - Bash script to create tasks
- `scripts/delete_task.sh` - Bash script to delete tasks
- `references/setup.md` - Detailed setup guide
## Implementation
The bash script uses:
- Google Tasks REST API directly
- `curl` for HTTP requests
- `jq` for JSON parsing
- Bearer token authentication from `token.json`
No Python dependencies required.
## Troubleshooting
**Token expired:**
```
Error: Invalid credentials
```
Delete `token.json` and re-authenticate.
**Missing jq:**
```
bash: jq: command not found
```
Install jq: `apt-get install jq` or `brew install jq`
For more details, see [setup.md](references/setup.md).