Vikunja-complete

Production-oriented Vikunja task/project management skill with deterministic commands and strong validation.

This package appears to do what it says: a deterministic CLI for Vikunja that will call the Vikunja API. Before enabling it: (1) only provide a VIKUNJA_TOKEN with the minimum permissions needed (consider creating a scoped/test token); (2) run the included smoke test against a non-production Vikunja instance if you want to validate behavior (the smoke test creates projects/tasks/labels/tokens); (3) review the vikunja.sh script yourself (it is included) to confirm no unexpected network endpoints or persistence are added; and (4) because the skill author is not a known publisher in the metadata, prefer using it in a sandbox or with limited credentials until you are comfortable.

Type: OpenClaw Skill Name: vikunja-complete Version: 4.0.0 The skill bundle provides a highly capable CLI for Vikunja management that includes several high-risk features such as API token creation, webhook management, and arbitrary file uploads/downloads (vikunja.sh). While the main script follows security best practices by using jq for JSON construction, the test-smoke.sh script contains a JSON injection vulnerability in the ensure_project function where the project title is interpolated directly into a JSON string. These powerful capabilities, combined with the lack of path restrictions on file operations, create a significant attack surface for data exfiltration or persistence if the AI agent is manipulated via prompt injection.