项目中枢 / Project Nerve

项目中枢 — 跨平台项目管理聚合器，统一管理 Trello、GitHub Issues、Linear、Notion、Obsidian 任务，支持自学习引擎和任务关系图谱

This skill appears to do what it claims, but review and follow these precautions before installing: (1) Only provide platform tokens via environment variables (PNC_*), not in chat; avoid pasting secrets into --data JSON or messages. (2) If you connect Obsidian, the skill will read .md files under the provided vault path — only point it at a vault you trust it to scan. (3) Check and, if desired, set PNC_DATA_DIR to control where files are written (default is ~/.openclaw-bdi/project-nerve). (4) Use least-privilege tokens (scoped GitHub PAT, minimal Notion integration permissions, etc.). (5) Because this skill runs local Python scripts, review code (already included) if you require absolute assurance; the provided files show no hidden network endpoints or obfuscated exfiltration. If you want extra certainty, provide the omitted file sections for a complete review.

Type: OpenClaw Skill Name: project-nerve Version: 1.1.0 The project-nerve skill bundle is a legitimate cross-platform project management tool that aggregates tasks from Trello, GitHub, Linear, Notion, and Obsidian. It demonstrates good security practices by instructing the AI agent to never ask for credentials in chat, instead relying on environment variables (e.g., PNC_GITHUB_TOKEN). The scripts (source_connector.py, task_aggregator.py) perform authorized API calls to well-known platforms and scan local directories only for the purpose of Obsidian integration as described. No evidence of data exfiltration, malicious execution, or prompt injection was found.