← 返回 Skills 市场
Pipeworx asana
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-asana
功能描述
Access and manage Asana workspaces, projects, and tasks via API calls for listing, searching, retrieving details, and creating tasks.
安全使用建议
This skill is suspicious because it points your Asana API calls at an external Pipeworx gateway and talks about OAuth while declaring no credentials — that means your Asana data and any access tokens might be routed through and visible to an external service with no publisher info. Before installing, ask the publisher for: (1) the identity and trust/legal/privacy info for gateway operator (https://gateway.pipeworx.io), (2) a clear auth flow (which env vars or OAuth client is required and where tokens are stored), (3) why a gateway is used instead of calling api.asana.com directly, and (4) an untruncated SKILL.md with exact runtime requests and data-sharing guarantees. If you cannot verify the gateway operator and auth handling, avoid installing or only use with a test Asana account that has no sensitive data.
功能分析
Type: OpenClaw Skill
Name: pipeworx-asana
Version: 1.0.0
The skill bundle provides a standard integration for Asana via an MCP server hosted at gateway.pipeworx.io. The functions described in SKILL.md are typical project management operations such as listing workspaces, tasks, and projects. There is no evidence of malicious code, unauthorized data exfiltration, or prompt injection attempts.
能力标签
能力评估
Purpose & Capability
The name/description say this skill accesses Asana via API, which is coherent, but the SKILL.md references an external gateway (https://gateway.pipeworx.io/asana/mcp) instead of the official Asana API and mentions OAuth. The skill declares no required env vars or primary credential despite needing OAuth tokens in practice. It's unclear why a gateway is used and who operates it; that is disproportionate or at least unexplained.
Instruction Scope
SKILL.md is the only runtime instruction and it instructs the agent to use an external 'mcpServers' endpoint. The file references OAuth and endpoint usage but is truncated/partial and provides no auth flow, no explicit instructions about which secrets to use, and no limits on what data the gateway receives. That grants the gateway potential access to all Asana data the skill touches without declared consent or explanation.
Install Mechanism
No install spec and no code files (instruction-only). This is low-risk from an installation perspective because nothing is downloaded or written automatically. However, runtime network calls to the external gateway are still a behavioral risk.
Credentials
The SKILL.md explicitly references OAuth (so credentials/tokens are required in practice) but the skill metadata lists no required env vars or primary credential. That mismatch is a red flag: either the gateway handles auth (in which case you must trust it), or the skill will expect credentials but fails to declare them. No justification is provided for sending data via a third-party gateway.
Persistence & Privilege
The skill is not marked always:true and has no install-time persistence. It can be invoked autonomously (the platform default), which is normal, but this does expand the blast radius if the gateway is untrusted. There is no evidence it modifies agent/system configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-asana - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-asana触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx asana 是什么？
Access and manage Asana workspaces, projects, and tasks via API calls for listing, searching, retrieving details, and creating tasks. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 82 次。
如何安装 Pipeworx asana？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-asana」即可一键安装，无需额外配置。
Pipeworx asana 是免费的吗？
是的，Pipeworx asana 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx asana 支持哪些平台？
Pipeworx asana 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx asana？
由 Bruce Gutman（@b-gutman）开发并维护，当前版本 v1.0.0。
推荐 Skills