← Back to Skills Marketplace
Pipeworx asana
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
82
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-asana
Description
Access and manage Asana workspaces, projects, and tasks via API calls for listing, searching, retrieving details, and creating tasks.
Usage Guidance
This skill is suspicious because it points your Asana API calls at an external Pipeworx gateway and talks about OAuth while declaring no credentials — that means your Asana data and any access tokens might be routed through and visible to an external service with no publisher info. Before installing, ask the publisher for: (1) the identity and trust/legal/privacy info for gateway operator (https://gateway.pipeworx.io), (2) a clear auth flow (which env vars or OAuth client is required and where tokens are stored), (3) why a gateway is used instead of calling api.asana.com directly, and (4) an untruncated SKILL.md with exact runtime requests and data-sharing guarantees. If you cannot verify the gateway operator and auth handling, avoid installing or only use with a test Asana account that has no sensitive data.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-asana
Version: 1.0.0
The skill bundle provides a standard integration for Asana via an MCP server hosted at gateway.pipeworx.io. The functions described in SKILL.md are typical project management operations such as listing workspaces, tasks, and projects. There is no evidence of malicious code, unauthorized data exfiltration, or prompt injection attempts.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description say this skill accesses Asana via API, which is coherent, but the SKILL.md references an external gateway (https://gateway.pipeworx.io/asana/mcp) instead of the official Asana API and mentions OAuth. The skill declares no required env vars or primary credential despite needing OAuth tokens in practice. It's unclear why a gateway is used and who operates it; that is disproportionate or at least unexplained.
Instruction Scope
SKILL.md is the only runtime instruction and it instructs the agent to use an external 'mcpServers' endpoint. The file references OAuth and endpoint usage but is truncated/partial and provides no auth flow, no explicit instructions about which secrets to use, and no limits on what data the gateway receives. That grants the gateway potential access to all Asana data the skill touches without declared consent or explanation.
Install Mechanism
No install spec and no code files (instruction-only). This is low-risk from an installation perspective because nothing is downloaded or written automatically. However, runtime network calls to the external gateway are still a behavioral risk.
Credentials
The SKILL.md explicitly references OAuth (so credentials/tokens are required in practice) but the skill metadata lists no required env vars or primary credential. That mismatch is a red flag: either the gateway handles auth (in which case you must trust it), or the skill will expect credentials but fails to declare them. No justification is provided for sending data via a third-party gateway.
Persistence & Privilege
The skill is not marked always:true and has no install-time persistence. It can be invoked autonomously (the platform default), which is normal, but this does expand the blast radius if the gateway is untrusted. There is no evidence it modifies agent/system configuration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-asana - After installation, invoke the skill by name or use
/pipeworx-asana - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx asana?
Access and manage Asana workspaces, projects, and tasks via API calls for listing, searching, retrieving details, and creating tasks. It is an AI Agent Skill for Claude Code / OpenClaw, with 82 downloads so far.
How do I install Pipeworx asana?
Run "/install pipeworx-asana" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx asana free?
Yes, Pipeworx asana is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx asana support?
Pipeworx asana is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx asana?
It is built and maintained by Bruce Gutman (@b-gutman); the current version is v1.0.0.
More Skills