Skills tasknotes
๐Ÿ“ฆ

tasknotes

Content revision r2 High Risk ๐ŸŒ Network access๐Ÿ”‘ Env variablesโš™๏ธ External commands

Manage Obsidian Tasks with TaskNotes

Manual TaskNotes maintenance can slow daily planning. This skill uses the local API to list, create, update, and delete Obsidian tasks.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "tasknotes" from https://skillstore.io/skills/artemxtech-tasknotes.md and its manifest at https://skillstore.io/api/skills/artemxtech-tasknotes/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "tasknotes". Show my in-progress tasks.

Expected outcome:

Three in-progress tasks found. The table includes status, priority, title, and project for each task.

Using "tasknotes". Create a high-priority task named Prepare launch notes for the Website project.

Expected outcome:

Created 'Prepare launch notes' with high priority and linked it to the Website project.

Using "tasknotes". What statuses and priorities are available?

Expected outcome:

Available statuses and priorities are listed from the current TaskNotes configuration.

Security Audit

High Risk
v9 โ€ข 7/23/2026 Open versioned report

Most static findings are false positives caused by Markdown backticks, placeholders, or intended requests to the local TaskNotes API. Semantic review found unvalidated URL construction, optional authentication, and deletion without confirmation. No prompt injection or malicious exfiltration intent was found.

2
Files scanned
447
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (3)

High
Unvalidated port value can redirect authenticated requests
TASKNOTES_API_PORT enters the URL authority without numeric validation. A crafted value can change the destination and expose the bearer token.
The port value flows directly into the URL authority, while the API key becomes a bearer header. No validation restricts the port to digits.
Medium
Task mutation API can operate without authentication
The setup permits an empty API token, and the client then omits authorization. Other local processes could modify or delete TaskNotes data.
The documentation explicitly permits an empty token, and the client omits Authorization when absent. This behavior is direct and unambiguous.
Medium
Delete command has no confirmation safeguard
The CLI sends a DELETE request immediately for the supplied task identifier. An agent mistake can cause unintended task loss without confirmation.
The delete command directly issues DELETE after argument parsing. No confirmation flag or prompt exists in the complete CLI implementation.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/artemxtech-tasknotes/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/artemxtech-tasknotes/security.svg)](https://skillstore.io/skills/artemxtech-tasknotes?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/artemxtech-tasknotes?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/artemxtech-tasknotes/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/artemxtech-tasknotes.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

ArtemXTech. (2026). tasknotes security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/artemxtech-tasknotes/audits/9

BibTeX citation

@techreport{artemxtech-artemxtech-tasknotes-2026, author = {ArtemXTech}, title = {tasknotes security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/artemxtech-tasknotes/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "tasknotes security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "ArtemXTech" date-released: "2026-07-23" url: "https://skillstore.io/skills/artemxtech-tasknotes/audits/9" identifiers: - type: other value: "skillstore:artemxtech-tasknotes:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
85
Content
70
Community
83
Spec Compliance

What You Can Build

Plan a personal workday

Review active and overdue tasks, then identify the next items by priority and due date.

Maintain project tasks

Create project-linked tasks and update their status as work progresses.

Automate task workflows

Use structured task results to support agent-driven planning and reporting.

Try These Prompts

Review current tasks
Show my current TaskNotes tasks in a readable table.
Create a project task
Create a TaskNotes task titled [title], linked to [project], with priority [priority] and due date [date].
Prioritize overdue work
List up to five overdue tasks for [project], then summarize them by priority and due date.
Review and update a project
Inspect available TaskNotes options, find active tasks for [project], propose status changes, and ask before applying any update.

Best Practices

  • Enable a TaskNotes API token before allowing automated task changes.
  • Run the options command before using status or priority values from a new vault.
  • Review task identifiers and proposed changes before update or delete operations.

Avoid

  • Do not place unrelated secrets in the vault environment file.
  • Do not expose the TaskNotes API port beyond the local machine.
  • Do not delete tasks from ambiguous natural-language references.

Frequently Asked Questions

What does this skill require?
It requires Obsidian, the TaskNotes plugin, and the plugin HTTP API enabled on the local machine.
Is an API token required?
The client supports token-free access, but a TaskNotes API token is recommended for task changes.
Which task fields can it change?
It can change titles, statuses, priorities, due dates, scheduled dates, and details.
Can it filter task lists?
Yes. It filters by status, project, priority, overdue state, and result limit.
Does task data stay local?
The CLI targets localhost. Task content can still pass through the active AI tool when prompts or responses include it.
Can the CLI undo a deleted task?
The CLI offers no undo command. Use Obsidian or TaskNotes recovery features when available.

Developer Details

Author

ArtemXTech

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

89edfdc710d0846129dcee6a929477b04f08052c

Maintenance freshness

7/24/2026

Usage

7 downloads ยท 182 views

File structure

๐Ÿ“ scripts/

๐Ÿ“„ tasks.py

๐Ÿ“„ SKILL.md