← Back to Skills Marketplace
1983
Downloads
4
Stars
3
Active Installs
2
Versions
Install in OpenClaw
/install zentao
Description
Use the zentao CLI to login and query ZenTao products and bugs. ZENTAO_URL usually includes /zentao.
Usage Guidance
Before installing: (1) verify the npm package and author (@leeguoo/zentao-mcp) on the npm page and, if possible, inspect the package source or repository for postinstall scripts; (2) be aware logging in will persist credentials to ~/.config/zentao/config.toml (or $XDG_CONFIG_HOME) — check file contents and permissions and avoid storing high-privilege passwords on shared machines; (3) consider using least-privilege or API-token login if ZenTao supports it; (4) install in an isolated environment if you are unsure about the package's trustworthiness.
Capability Analysis
Type: OpenClaw Skill
Name: zentao
Version: 1.0.1
The skill bundle is benign. It provides instructions for installing and using the `zentao` CLI tool to interact with ZenTao, including login and querying products/bugs. All commands and descriptions are aligned with the stated purpose, and there is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The skill transparently describes where credentials are stored (`~/.config/zentao/config.toml`), which is expected behavior for a login utility and not an attempt at exfiltration.
Capability Assessment
Purpose & Capability
Name, description, and install spec match: the skill installs the @leeguoo/zentao-mcp npm package which provides a 'zentao' CLI and the SKILL.md documents commands for listing products and bugs and logging in — all coherent with the stated purpose.
Instruction Scope
Runtime instructions are narrowly scoped to installing the CLI and using it (login, whoami, list/get commands). The only filesystem interaction described is writing credentials to ~/.config/zentao/config.toml (or $XDG_CONFIG_HOME), which is expected for a CLI that stores credentials; the SKILL.md does not instruct reading unrelated system files or exfiltrating data to unexpected endpoints.
Install Mechanism
Install uses an npm package (@leeguoo/zentao-mcp) from the public registry — expected for a JS CLI. This is a normal choice but npm packages can run lifecycle/postinstall scripts, so verify the package and publisher before installing on sensitive systems.
Credentials
The skill declares no required environment variables or credentials, which matches the instructions. However the CLI stores login credentials to a local config file (~/.config/zentao/config.toml or $XDG_CONFIG_HOME), so users should be aware credentials will be persisted on disk and verify file permissions/format.
Persistence & Privilege
The skill is not always-enabled and is user-invocable only. It modifies only its own CLI config file (per the doc) and does not request elevated or system-wide privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zentao - After installation, invoke the skill by name or use
/zentao - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Documentation updated in SKILL.md for improved clarity and brevity
- Added concise install and usage instructions
- Provided clear login and verification workflow
- Listed common commands with sample usage and output options
- Removed redundant or overly detailed sections to focus on main workflow
v1.0.0
ZenTao CLI initial release.
- Provides a command-line interface for ZenTao REST API (products and bugs).
- Supports global install via pnpm or npm, with `zentao` as the main command.
- Single sign-in with `zentao login`, storing authentication locally.
- Commands available for listing products, listing and viewing bugs, and self-testing.
- Output formats include table (TSV) and JSON.
- Includes compatibility alias `zentao-mcp`.
Metadata
Frequently Asked Questions
What is zentao?
Use the zentao CLI to login and query ZenTao products and bugs. ZENTAO_URL usually includes /zentao. It is an AI Agent Skill for Claude Code / OpenClaw, with 1983 downloads so far.
How do I install zentao?
Run "/install zentao" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is zentao free?
Yes, zentao is completely free (open-source). You can download, install and use it at no cost.
Which platforms does zentao support?
zentao is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created zentao?
It is built and maintained by 郭立lee (@leeguooooo); the current version is v1.0.1.
More Skills