← Back to Skills Marketplace
135
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install zentao-api-old
Description
Integrate with ZenTao Legacy API 1.0 to manage projects, tasks, bugs, products, and workflows with session persistence and role-specific operations.
Usage Guidance
This package appears to be a genuine ZenTao API client, but there are a few things to check before installing:
- Inspect TOOLS.md (present in the bundle) to see exactly how credentials are stored and formatted. The SKILL.md requires that file, but the registry metadata did not declare it — do not drop secrets into your global config until you verify the format and location.
- Open lib/zentao_client.py and scripts/zentao_cli.py to confirm they only call the expected ZenTao endpoints and do not send data to unexpected third-party endpoints. Pay attention to any hard-coded URLs, telemetry, or callbacks.
- Note that sessions are persisted under .zentao/sessions/ in the project directory. If that directory will be on shared storage or backed up, consider where session files end up and whether that is acceptable.
- The package depends on requests (requirements.txt). Run the code in an isolated environment (development VM or container) if you want to test before trusting it with real credentials.
I rate this as suspicious (not clearly malicious) because the credential handling and required-file declaration are inconsistent; reviewing the credential-read code will likely resolve the uncertainty.
Capability Assessment
Purpose & Capability
The name/description (ZenTao Legacy API integration) matches the included code (zentao_client.py, zentao_cli.py) and the SKILL.md usage examples. However the registry metadata claimed 'instruction-only' / no required config paths while SKILL.md declares a required file (TOOLS.md) for credentials and the package actually contains code files and requirements.txt. That mismatch between declared metadata and actual bundle is unexpected.
Instruction Scope
SKILL.md's runtime instructions focus on creating a ZenTao client, reading credentials (via read_credentials()), obtaining a session, and calling ZenTao API methods. The instructions reference reading a project-local TOOLS.md and persisting sessions under a project-root path (.zentao/sessions/). They do not instruct the agent to read or exfiltrate unrelated system files or environment variables.
Install Mechanism
There is no installer that downloads arbitrary code from the network — the package contains Python source and a requirements.txt (requests). That is low-to-moderate risk: code will run locally, but no external install URL or archive extraction is used. The presence of packaged source is normal for a language client.
Credentials
The skill clearly needs ZenTao credentials (SKILL.md shows read_credentials() and demands a TOOLS.md section for 'ZenTao API'), but the registry metadata lists no required env vars or config paths and no primary credential. Credentials are expected to come from a file (TOOLS.md) but that requirement is not reflected in the metadata — this mismatch is a concern because users may not realize where secrets must be placed or how they will be stored/read. Also session persistence to .zentao/sessions/ will create files on disk containing session IDs.
Persistence & Privilege
The skill persists session state under the project root (.zentao/sessions/), which is within the skill's scope but is still writable persistent storage. always:false so it won't be force-enabled. Persisting session tokens locally is functionally justified for a client but you should verify how long tokens are kept and whether they are stored encrypted.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zentao-api-old - After installation, invoke the skill by name or use
/zentao-api-old - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Version bump to 1.0.1 with no user-facing changes or file updates.
- No updates to features, documentation, or dependencies.
- Internal version update for consistency.
v1.0.0
Initial release with Python integration for ZenTao Legacy API v1.0.
- Provides a Python client for ZenTao API covering products, projects, tasks, and bugs lifecycle management.
- Features structured quick reference for frequently used APIs by user roles (Product Manager, Project Manager, Developer).
- Supports session management with automatic login/session persistence.
- Includes command samples for common scenarios (task assignment, bug tracking, project/requirement planning).
- Requires TOOLS.md credential configuration and Python3 + requests.
Metadata
Frequently Asked Questions
What is zentao-api-old?
Integrate with ZenTao Legacy API 1.0 to manage projects, tasks, bugs, products, and workflows with session persistence and role-specific operations. It is an AI Agent Skill for Claude Code / OpenClaw, with 135 downloads so far.
How do I install zentao-api-old?
Run "/install zentao-api-old" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is zentao-api-old free?
Yes, zentao-api-old is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does zentao-api-old support?
zentao-api-old is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created zentao-api-old?
It is built and maintained by 张贝 (@hellotombruce); the current version is v1.0.1.
More Skills