✅ Things Mac 1.0.0 — 管理Things任务

v1.0.0

在 macOS 上通过 things CLI 操作 Things 3：用 URL scheme 增改项目与待办，直接读取/搜索本地 Things 数据库。适合需自动化任务管理、批量导入或脚本化 GTD 流程的用户。

0· 263·2 当前·2 累计

by @kenswj

自动化开发工具数据库工作流

下载技能包

最后更新

2026/4/22

安全扫描

VirusTotal

无害

查看报告

OpenClaw

可疑

medium confidence

NULL

评估建议

This skill appears to do what it claims (manage Things 3 via a CLI), but pay attention to two things before installing: (1) the SKILL.md asks you to grant Full Disk Access to the calling app (Terminal or Clawdbot.app). Full Disk Access is a broad macOS permission — only grant it if you trust the app and the binary you install. (2) The instructions reference optional env vars (THINGSDB, THINGS_AUTH_TOKEN) which are not declared as required metadata; these are used for DB path and authenticated up...

详细分析 ▾

✓ 用途与能力

Name, description, required binary ('things'), and the Go install module (github.com/ossianhempel/things3-cli) align: the skill is intended to call a Things CLI to read the local DB and use the Things URL scheme for writes.

⚠ 指令范围

SKILL.md instructs the agent to read the local Things database and explicitly tells users to grant Full Disk Access to the calling app (Terminal for manual runs; 'Clawdbot.app' for gateway runs). Granting Full Disk Access is a broad system-level permission and extends beyond just the Things database. The instructions also reference optional env vars (THINGSDB, THINGS_AUTH_TOKEN) that are used at runtime but are not declared in the registry metadata.

✓ 安装机制

Install method is a go install of a GitHub module matching the homepage; this is a common and expected way to produce the required 'things' binary. No downloads from untrusted URLs or archive extraction are used.

ℹ 凭证需求

No required environment variables are declared in the metadata, but SKILL.md documents optional THINGSDB and THINGS_AUTH_TOKEN for DB path and authenticated updates. These optional variables are reasonable for the described functionality, but their presence in the instructions without being listed in the skill metadata is an inconsistency.

⚠ 持久化与权限

The skill itself does not request 'always' presence and requires no persistent credentials, but its instructions expect the caller/app to be granted macOS Full Disk Access to read the Things DB — a high-privilege OS-level capability that affects the whole calling app (and thus any agent gateway the app runs).

安全有层次，运行前请审查代码。

运行时依赖

🖥️ OSmacOS

版本

latestv1.0.02026/3/15

NULL

● 无害

安装命令

点击复制

官方npx clawhub@latest install things-mac-1-0-0

镜像加速npx clawhub@latest install things-mac-1-0-0 --registry https://cn.longxiaskill.com

数据来源：ClawHub ↗ · 中文优化：龙虾技能库