← 返回 Skills 市场
redmine-tools
作者
yinxianwei
· GitHub ↗
· v1.0.0
· MIT-0
105
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install redmine-tools
功能描述
Fetch, update, and summarize Redmine issue attachments from CLI.
安全使用建议
Before installing or running this skill:
- Expect to provide REDMINE_BASE_URL and REDMINE_API_KEY and OpenAI-compatible credentials; the registry metadata currently omits these — ask the publisher to correct that.
- Node.js must be available to run scripts/redmine.js.
- Understand that the 'image' command downloads attachments from Redmine and sends the full image (base64 data URL) to whatever OPENAI_API_URL you configure; only point this to a trusted model endpoint. If attachments may contain confidential data, do not send them to external/third-party services.
- Verify the source code (no homepage/source provided) or run it in an isolated environment before using with production credentials.
- Prefer using least-privilege API keys for Redmine and, if possible, an internal model endpoint or one with appropriate data-handling guarantees.
If the publisher can correct the metadata (declare required env vars and the Node requirement) and provide a trustworthy source/homepage, that will reduce the ambiguity.
功能分析
Type: OpenClaw Skill
Name: redmine-tools
Version: 1.0.0
The redmine-tools skill is a functional utility for managing Redmine issues and summarizing image attachments via an OpenAI-compatible API. The implementation in scripts/redmine.js uses standard Node.js fetch calls, properly handles API keys through environment variables, and contains no evidence of data exfiltration, obfuscation, or unauthorized execution. All logic is consistent with the documentation provided in SKILL.md.
能力评估
Purpose & Capability
The skill's name and description match the code: it fetches/updates Redmine issues and summarizes image attachments via an OpenAI-compatible API. However, the registry metadata claims no required environment variables or binaries while SKILL.md and the script clearly require REDMINE_* and OPENAI_* env vars and a Node runtime. That mismatch is unexpected and should be corrected.
Instruction Scope
The SKILL.md and script instruct the agent to: read REDMINE_BASE_URL and REDMINE_API_KEY from environment, download issue attachments from Redmine, convert images to data URLs, and POST them (with accompanying prompt/context) to the OPENAI_API_URL. This behavior is coherent with image summarization but it also means potentially sensitive attachments are transmitted to an external model endpoint — a clear exfiltration risk if the endpoint is untrusted. The instructions do not reference unrelated system files, so no other scope creep was found.
Install Mechanism
No install spec is provided (lowest install risk). However, the skill includes a Node.js script and expects it to be run via 'node scripts/redmine.js'. The registry's 'required binaries: none' is inconsistent with that expectation — Node.js must be available on PATH for the script to run.
Credentials
The SKILL.md requires REDMINE_BASE_URL and REDMINE_API_KEY and OPENAI_API_URL/OPENAI_API_KEY/OPENAI_MODEL/OPENAI_IMAGE_SUMMARY_PROMPT. These are proportionate to the stated functionality. But the registry metadata does not declare these required environment variables or a primary credential, which is a mismatch. Also, because the skill sends full image attachments (base64 data URLs) to the OpenAI-compatible endpoint, the OPENAI_API_URL and OPENAI_API_KEY effectively receive potentially sensitive data; users should ensure the model endpoint is trusted and that REDMINE_API_KEY has minimal privileges.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not modify other skills or system-wide settings. It requires no special persistent privileges beyond the runtime env vars and executing the script with the Node runtime.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install redmine-tools - 安装完成后,直接呼叫该 Skill 的名称或使用
/redmine-tools触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of redmine-tools with CLI support.
- Fetch Redmine issues (including attachments and journals).
- Update issues with new status and/or notes.
- Summarize image attachments using an OpenAI-compatible API.
- All configuration via environment variables; outputs JSON to stdout.
- Handles only supported image types and reports unsupported files.
元数据
常见问题
redmine-tools 是什么?
Fetch, update, and summarize Redmine issue attachments from CLI. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 105 次。
如何安装 redmine-tools?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install redmine-tools」即可一键安装,无需额外配置。
redmine-tools 是免费的吗?
是的,redmine-tools 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
redmine-tools 支持哪些平台?
redmine-tools 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 redmine-tools?
由 yinxianwei(@yinxianwei)开发并维护,当前版本 v1.0.0。
推荐 Skills