← 返回 Skills 市场
savelieve

Test Integration

作者 Random · GitHub ↗ · v1.0.2
cross-platform ⚠ suspicious
1613
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install test-manager
功能描述
Manage ClickUp tasks by listing, creating, updating statuses, and retrieving details via ClickUp API using provided workspace and API token.
安全使用建议
This skill implements a ClickUp integration but has two issues you should consider before installing: (1) the code will look for credentials in a TOOLS.md file located at ../../../../clawd/TOOLS.md relative to the skill, which means it will read a file outside the skill directory — verify where that file lives and what it contains (avoid keeping other secrets there); (2) the registry metadata does not list the required CLICKUP_API_TOKEN and CLICKUP_WORKSPACE_ID environment variables, so the skill may fail unless you set them or create the TOOLS.md entry. If you proceed, prefer setting the two ClickUp env vars rather than storing credentials in a shared TOOLS.md, inspect the skill.js source yourself, and ensure file permissions on any TOOLS.md prevent accidental exposure of other secrets. If you want higher assurance, ask the publisher to update registry metadata to declare the required env vars and to document the exact TOOLS.md path/format.
功能分析
Type: OpenClaw Skill Name: test-manager Version: 1.0.2 The skill bundle provides a legitimate integration with the ClickUp API for task management. Credential handling is standard, retrieving API tokens from environment variables or a designated `TOOLS.md` file, which is explicitly mentioned in `SKILL.md`. All network requests are directed to the official `api.clickup.com` endpoint, and there is no evidence of data exfiltration to unauthorized domains, malicious execution, or prompt injection attempts against the agent beyond standard operational instructions.
能力评估
Purpose & Capability
SKILL.md and skill.js implement a ClickUp API integration (listing/creating/updating/searching tasks), which is consistent. However the registry metadata says 'Required env vars: none' while both SKILL.md and skill.js require CLICKUP_API_TOKEN and CLICKUP_WORKSPACE_ID — this metadata mismatch is incoherent and could mislead users about what credentials are needed.
Instruction Scope
The runtime instructions tell the user to put credentials in TOOLS.md or env vars. The code implements that by reading a CONFIG_PATH computed as join(__dirname, '..', '..', '..', 'clawd', 'TOOLS.md'), i.e. a file outside the skill directory. Reading an external TOOLS.md is scope creep: it can expose any content in that file (not just ClickUp tokens) and the SKILL.md does not specify the exact expected path or format clearly.
Install Mechanism
There is no install spec (instruction-only install). The package contains code but it does not fetch remote artifacts or run an installer; risk from the install mechanism is low.
Credentials
Requesting CLICKUP_API_TOKEN and CLICKUP_WORKSPACE_ID is appropriate for a ClickUp integration. However these env vars are not declared in the registry metadata and the implementation additionally attempts to parse credentials from TOOLS.md (which may contain other secrets). That combination increases the chance of accidental exposure if TOOLS.md holds unrelated credentials.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and does not ask to be persistently installed beyond normal skill code — privileges appear normal for a tool integration.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install test-manager
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /test-manager 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Added integration documentation for the ClickUp API, including authentication, common API actions, and endpoints. - Provided clear guidance for task assignment between humans, AI, and collaborative work. - Included example API requests for listing, creating, updating, and retrieving tasks. - Documented required request headers and common status values. - Outlined error handling for common issues such as authentication, missing resources, and rate limiting.
元数据
Slug test-manager
版本 1.0.2
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Test Integration 是什么?

Manage ClickUp tasks by listing, creating, updating statuses, and retrieving details via ClickUp API using provided workspace and API token. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1613 次。

如何安装 Test Integration?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install test-manager」即可一键安装,无需额外配置。

Test Integration 是免费的吗?

是的,Test Integration 完全免费(开源免费),可自由下载、安装和使用。

Test Integration 支持哪些平台?

Test Integration 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Test Integration?

由 Random(@savelieve)开发并维护,当前版本 v1.0.2。

💬 留言讨论