Things Mac logo

Things Mac

Alert level: Medium

Manage Things 3 via the 'things' CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user asks Clawdbot to add a task to Things, list inbox/today/upcoming, search tasks, or inspect projects/areas/tags.

Locality:Local
Data access:Personal
Actions:Write
Installs 44Downloads 388Stars 2Updated 373h ago

Why this rating

Deterministic checks triggered by the tool capabilities and evidence.

  • Locality: Local

    Reads the local Things database and uses the Things URL scheme.

  • Data access: Personal

    Accesses task lists, projects, areas, tags, and notes.

  • Action surface: Write

    Adds and updates todos, including completion/cancel.

Best practices

Follow these steps to reduce risk when using this skill.

  • Grant Full Disk Access only to the app used for Things automation.
  • Keep THINGS_AUTH_TOKEN in environment variables and out of shell history.
  • Use --dry-run and limit automation to a dedicated list or project.

Evidence links

Public sources backing the indicator assignments.

Always be careful when navigating away from the website.

Max-risk rule

If any capability reaches a higher level, the entire indicator level bumps up to keep ratings deterministic and easy to scan.