← 返回 Skills 市场
leeguooooo

zentao

作者 郭立lee · GitHub ↗ · v1.0.1
cross-platform ✓ 安全检测通过
1983
总下载
4
收藏
3
当前安装
2
版本数
在 OpenClaw 中安装
/install zentao
功能描述
Use the zentao CLI to login and query ZenTao products and bugs. ZENTAO_URL usually includes /zentao.
安全使用建议
Before installing: (1) verify the npm package and author (@leeguoo/zentao-mcp) on the npm page and, if possible, inspect the package source or repository for postinstall scripts; (2) be aware logging in will persist credentials to ~/.config/zentao/config.toml (or $XDG_CONFIG_HOME) — check file contents and permissions and avoid storing high-privilege passwords on shared machines; (3) consider using least-privilege or API-token login if ZenTao supports it; (4) install in an isolated environment if you are unsure about the package's trustworthiness.
功能分析
Type: OpenClaw Skill Name: zentao Version: 1.0.1 The skill bundle is benign. It provides instructions for installing and using the `zentao` CLI tool to interact with ZenTao, including login and querying products/bugs. All commands and descriptions are aligned with the stated purpose, and there is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The skill transparently describes where credentials are stored (`~/.config/zentao/config.toml`), which is expected behavior for a login utility and not an attempt at exfiltration.
能力评估
Purpose & Capability
Name, description, and install spec match: the skill installs the @leeguoo/zentao-mcp npm package which provides a 'zentao' CLI and the SKILL.md documents commands for listing products and bugs and logging in — all coherent with the stated purpose.
Instruction Scope
Runtime instructions are narrowly scoped to installing the CLI and using it (login, whoami, list/get commands). The only filesystem interaction described is writing credentials to ~/.config/zentao/config.toml (or $XDG_CONFIG_HOME), which is expected for a CLI that stores credentials; the SKILL.md does not instruct reading unrelated system files or exfiltrating data to unexpected endpoints.
Install Mechanism
Install uses an npm package (@leeguoo/zentao-mcp) from the public registry — expected for a JS CLI. This is a normal choice but npm packages can run lifecycle/postinstall scripts, so verify the package and publisher before installing on sensitive systems.
Credentials
The skill declares no required environment variables or credentials, which matches the instructions. However the CLI stores login credentials to a local config file (~/.config/zentao/config.toml or $XDG_CONFIG_HOME), so users should be aware credentials will be persisted on disk and verify file permissions/format.
Persistence & Privilege
The skill is not always-enabled and is user-invocable only. It modifies only its own CLI config file (per the doc) and does not request elevated or system-wide privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install zentao
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /zentao 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Documentation updated in SKILL.md for improved clarity and brevity - Added concise install and usage instructions - Provided clear login and verification workflow - Listed common commands with sample usage and output options - Removed redundant or overly detailed sections to focus on main workflow
v1.0.0
ZenTao CLI initial release. - Provides a command-line interface for ZenTao REST API (products and bugs). - Supports global install via pnpm or npm, with `zentao` as the main command. - Single sign-in with `zentao login`, storing authentication locally. - Commands available for listing products, listing and viewing bugs, and self-testing. - Output formats include table (TSV) and JSON. - Includes compatibility alias `zentao-mcp`.
元数据
Slug zentao
版本 1.0.1
许可证
累计安装 4
当前安装数 3
历史版本数 2
常见问题

zentao 是什么?

Use the zentao CLI to login and query ZenTao products and bugs. ZENTAO_URL usually includes /zentao. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1983 次。

如何安装 zentao?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install zentao」即可一键安装,无需额外配置。

zentao 是免费的吗?

是的,zentao 完全免费(开源免费),可自由下载、安装和使用。

zentao 支持哪些平台?

zentao 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 zentao?

由 郭立lee(@leeguooooo)开发并维护,当前版本 v1.0.1。

💬 留言讨论