← 返回 Skills 市场
uncooldog

Plane Flow

作者 uncooldog · GitHub ↗ · v0.1.3 · MIT-0
cross-platform ⚠ suspicious
76
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install plane-flow
功能描述
Operate a local/self-hosted Plane workspace for product and project flow management. Use when the user wants to read or update Plane projects, issues, states...
安全使用建议
This package appears to do what it says: connect to a self-hosted Plane instance and manage projects/issues. Before installing or enabling it for non-technical users, have an administrator: 1) provision a least-privileged PLANE_API_TOKEN and confirm the token scope, 2) set PLANE_BASE_URL to your internal Plane endpoint (network-restrict this endpoint if possible), 3) validate connectivity with python3 scripts/test_connection.py, and 4) only run scripts/init_config.py as an admin who understands it will write ~/.plane_config.yaml. Be cautious when uploading attachments (the skill reads files you explicitly provide). If you need stronger assurance, review the token scope and run the scripts in a controlled environment first.
功能分析
Type: OpenClaw Skill Name: plane-flow Version: 0.1.3 The skill bundle provides integration with the Plane project management system and includes functionality to upload local files as attachments. A potential vulnerability exists in `scripts/service.py`, where a custom markdown directive `[image: path]` triggers a file read and upload via `scripts/client.py` without path validation, which could be exploited to exfiltrate sensitive local files if the agent processes untrusted input. Additionally, the bundle includes `scripts/run_with_env.py`, which uses `runpy.run_path` to execute arbitrary Python scripts, representing a high-risk capability intended for administrative setup.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
Name and description match the implemented behavior: bundled Python scripts talk to a Plane instance and perform read/write operations. Required binaries (python3) and env vars (PLANE_BASE_URL, PLANE_API_TOKEN, PLANE_WORKSPACE_ID) are appropriate for this purpose.
Instruction Scope
SKILL.md and the CLI scripts constrain runtime behavior to contacting the configured Plane instance and optionally reading files explicitly provided for attachment uploads. The instructions do not direct the agent to read unrelated system files or exfiltrate data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with bundled Python scripts; there is no high-risk download/install step. It relies on common Python packages (requests, optional PyYAML/markdown) which is proportionate to the task.
Credentials
The skill requires only the expected Plane-related env vars (base URL, API token, workspace ID). No other unrelated secrets or credentials are requested. An optional PLANE_CONFIG_FILE is clearly documented for local aliasing/mappings.
Persistence & Privilege
The skill does not request always:true and does not modify other skills' configurations. The only write behavior is an admin-only init helper that writes ~/.plane_config.yaml when intentionally run.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install plane-flow
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /plane-flow 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.3
Use Plane's native image-component nodes for correct left/center/right alignment. Add --image-align flag to issues create, issues update-desc, and comments create. Add [image: path, align] directive for per-image control in descriptions. Alignment options: left, center (default), right. Note: true text wrapping is not supported by Plane's editor.
v0.1.1
Clarify runtime requirements, required Plane environment variables, credential expectations, and admin-only local helper behavior for safer review and installation.
v0.1.0
Initial public release: self-hosted Plane workflow skill with admin-first setup, conversational business-user workflow support, bundled issue/project helpers, interactive init helper, and publish-ready cleanup.
元数据
Slug plane-flow
版本 0.1.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Plane Flow 是什么?

Operate a local/self-hosted Plane workspace for product and project flow management. Use when the user wants to read or update Plane projects, issues, states... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 76 次。

如何安装 Plane Flow?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install plane-flow」即可一键安装,无需额外配置。

Plane Flow 是免费的吗?

是的,Plane Flow 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Plane Flow 支持哪些平台?

Plane Flow 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Plane Flow?

由 uncooldog(@uncooldog)开发并维护,当前版本 v0.1.3。

💬 留言讨论