Most static alerts are false positives from Markdown backticks, API documentation fields, and normal UTF-8 README content. Confirmed risk remains because the skill performs authenticated network requests to Dida365 and directs OAuth setup through an author-controlled worker URL. No prompt-injection text was found in the scanned files.
The redirect URI is hardcoded to the author's Cloudflare Worker domain. Users relying on the default OAuth flow must trust that third-party deployment with token exchange.
The CLI points users to the author's Cloudflare Worker for OAuth authorization when a token is missing. That default creates a third-party token broker risk.
This fetch POST exchanges an OAuth code at the Dida365 token endpoint and includes client credentials. It is intended, but it is real external network traffic carrying authentication material.
The code calls httpx.Client.request with Authorization headers and task payloads. This is intended but confirms outbound network access with sensitive data.
The CLI and worker default to https://ticktick-oauth.dcjanus.workers.dev for OAuth authorization and callback handling. That makes users depend on an author-controlled service during access token exchange.
The hardcoded authorize URL, redirect URI, and README deployment note all point to the same author-controlled worker. This directly affects OAuth token handling.
04
是正措置
この監査で推奨される修正が記録されています。これらを適用する責任はメンテナーにあります。
FIX-001
高
Author-controlled OAuth endpoint is used by default.
Make the authorize URL and redirect URI configurable, and document a self-hosted worker deployment path for users.
FIX-002
中
Bearer tokens and task data are sent to the configured API base URL.
Warn users before changing the base URL, and consider restricting token-bearing requests to trusted Dida365 endpoints by default.
FIX-003
中
Delete commands do not require confirmation.
Add an explicit confirmation step or a force flag for project and task deletion commands.
FIX-004
中
OAuth callback does not validate state before returning an access token.
Store and validate state for the OAuth flow, or clearly document that the helper is only for trusted single-user deployments.