OpenProject by altf1be

OpenProject CRUD skill — manage work packages, projects, groups, news, users, watchers, relations, notifications, time entries, comments, attachments, wiki p...

This skill appears to do exactly what it says: a CLI for OpenProject using an API token. Before installing, confirm the OP_HOST value points to a trusted OpenProject instance and use a token with least privilege needed (avoid highly privileged tokens if possible). Running `npm install` will pull small, public npm packages (commander, dotenv); run installs in a controlled environment. Be aware the CLI may follow any API-provided links (including full URLs) — that is normal for HAL-style APIs but means a compromised or malicious server could cause additional outbound requests. Finally, avoid exposing your OP_API_TOKEN to untrusted environments or logs and review the script if you need to enforce stricter upload/path policies.

Type: OpenClaw Skill Name: openproject-by-altf1be Version: 2.0.0 The OpenProject skill bundle is a comprehensive and well-documented tool for managing OpenProject instances via its REST API v3. The core logic in `scripts/openproject.mjs` implements standard CRUD operations for numerous entities (work packages, projects, users, etc.) and includes proactive security measures such as path traversal checks for file uploads, file size validation, and mandatory confirmation flags for destructive actions. The skill uses standard environment variables for configuration and authentication, communicates only with the user-specified host, and shows no signs of malicious intent or unauthorized data exfiltration.