Back to Home
noctivagous icon

todotracker

Verified Safe

by noctivagous

Overview

AI-powered todo management system for software development projects, integrating with agentic code editors via Model Context Protocol (MCP).

Installation

Run Command
python /path/to/todotracker/todotracker_webserver.py

Environment Variables

  • TODOTRACKER_DB_PATH
  • TODOTRACKER_PROJECT_ROOT
  • TODOTRACKER_PROJECT_NAME

Security Notes

The system is designed for local, single-user operation with no built-in authentication, relying on local system security. It utilizes `subprocess.run` to execute internal shell scripts (`setup-project-todos.sh`, `launch_todotracker_webserver.sh`) provided within the repository. These scripts receive controlled arguments, which mitigates the risk of arbitrary command injection. The web UI's Markdown rendering uses `marked.parse` with `DOMPurify.sanitize` (if available) to prevent XSS, falling back to safe text content rendering if `DOMPurify` is absent. File attachments are stored on the local filesystem with unique, sanitized filenames, including a basic path traversal defense in `_safe_filename`. Overall, it is considered safe for its intended local execution environment.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens5000
Stars0
Forks0
Last Update2026-01-19

Tags

AITodo ManagementTask ManagementAgentic IDEMCP ServerSQLitePythonFastAPIWeb UIDevelopment Tool