← 返回 Skills 市场
135
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install zentao-api-old
功能描述
Integrate with ZenTao Legacy API 1.0 to manage projects, tasks, bugs, products, and workflows with session persistence and role-specific operations.
安全使用建议
This package appears to be a genuine ZenTao API client, but there are a few things to check before installing:
- Inspect TOOLS.md (present in the bundle) to see exactly how credentials are stored and formatted. The SKILL.md requires that file, but the registry metadata did not declare it — do not drop secrets into your global config until you verify the format and location.
- Open lib/zentao_client.py and scripts/zentao_cli.py to confirm they only call the expected ZenTao endpoints and do not send data to unexpected third-party endpoints. Pay attention to any hard-coded URLs, telemetry, or callbacks.
- Note that sessions are persisted under .zentao/sessions/ in the project directory. If that directory will be on shared storage or backed up, consider where session files end up and whether that is acceptable.
- The package depends on requests (requirements.txt). Run the code in an isolated environment (development VM or container) if you want to test before trusting it with real credentials.
I rate this as suspicious (not clearly malicious) because the credential handling and required-file declaration are inconsistent; reviewing the credential-read code will likely resolve the uncertainty.
能力评估
Purpose & Capability
The name/description (ZenTao Legacy API integration) matches the included code (zentao_client.py, zentao_cli.py) and the SKILL.md usage examples. However the registry metadata claimed 'instruction-only' / no required config paths while SKILL.md declares a required file (TOOLS.md) for credentials and the package actually contains code files and requirements.txt. That mismatch between declared metadata and actual bundle is unexpected.
Instruction Scope
SKILL.md's runtime instructions focus on creating a ZenTao client, reading credentials (via read_credentials()), obtaining a session, and calling ZenTao API methods. The instructions reference reading a project-local TOOLS.md and persisting sessions under a project-root path (.zentao/sessions/). They do not instruct the agent to read or exfiltrate unrelated system files or environment variables.
Install Mechanism
There is no installer that downloads arbitrary code from the network — the package contains Python source and a requirements.txt (requests). That is low-to-moderate risk: code will run locally, but no external install URL or archive extraction is used. The presence of packaged source is normal for a language client.
Credentials
The skill clearly needs ZenTao credentials (SKILL.md shows read_credentials() and demands a TOOLS.md section for 'ZenTao API'), but the registry metadata lists no required env vars or config paths and no primary credential. Credentials are expected to come from a file (TOOLS.md) but that requirement is not reflected in the metadata — this mismatch is a concern because users may not realize where secrets must be placed or how they will be stored/read. Also session persistence to .zentao/sessions/ will create files on disk containing session IDs.
Persistence & Privilege
The skill persists session state under the project root (.zentao/sessions/), which is within the skill's scope but is still writable persistent storage. always:false so it won't be force-enabled. Persisting session tokens locally is functionally justified for a client but you should verify how long tokens are kept and whether they are stored encrypted.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zentao-api-old - 安装完成后，直接呼叫该 Skill 的名称或使用
/zentao-api-old触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Version bump to 1.0.1 with no user-facing changes or file updates.
- No updates to features, documentation, or dependencies.
- Internal version update for consistency.
v1.0.0
Initial release with Python integration for ZenTao Legacy API v1.0.
- Provides a Python client for ZenTao API covering products, projects, tasks, and bugs lifecycle management.
- Features structured quick reference for frequently used APIs by user roles (Product Manager, Project Manager, Developer).
- Supports session management with automatic login/session persistence.
- Includes command samples for common scenarios (task assignment, bug tracking, project/requirement planning).
- Requires TOOLS.md credential configuration and Python3 + requests.
元数据
常见问题
zentao-api-old 是什么？
Integrate with ZenTao Legacy API 1.0 to manage projects, tasks, bugs, products, and workflows with session persistence and role-specific operations. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 135 次。
如何安装 zentao-api-old？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zentao-api-old」即可一键安装，无需额外配置。
zentao-api-old 是免费的吗？
是的，zentao-api-old 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
zentao-api-old 支持哪些平台？
zentao-api-old 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 zentao-api-old？
由 张贝（@hellotombruce）开发并维护，当前版本 v1.0.1。
推荐 Skills