禅道MCP agent pro

禅道(ZenTao) MCP大模型能力扩展包。提供跨项目的数据聚合视图、一句话生成任务、无缝报工(Log Effort)、自动状态流转等四组原生能力。

This skill appears to do what it says (ZenTao task dashboard, create tasks, log effort, etc.), but exercise caution before installing: 1) Verify the npm package source and maintainer (look up @chenish/zentao-mcp-agent on the npm registry, inspect its repository and recent commits). 2) Prefer installing in a sandbox or VM first; review the package contents (especially any code that runs on install or creates binaries). 3) Understand where credentials will be stored — avoid supplying privileged admin credentials unless you trust the publisher. 4) If possible, create a limited ZenTao account (least privilege) for the integration. 5) If you need higher confidence, ask the publisher for a repository link, a published changelog, or a signed release; providing those would increase my confidence and could change the verdict to benign.

Type: OpenClaw Skill Name: mcp-zentao-pro Version: 1.1.0 The skill bundle provides a comprehensive integration for ZenTao project management, enabling an AI agent to perform tasks such as querying dashboards, creating tasks, logging work hours, and generating reports. It utilizes a Node.js package (@chenish/zentao-mcp-agent) and provides detailed instructions in SKILL.md for mapping user intents to specific tool calls. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the requirement for credentials (via zentao-cli login) is consistent with the tool's purpose of interacting with a private ZenTao instance.