禅道 CLI 技能，通过 zentao-cli 工具查询和操作禅道（ZenTao）数据

• Outcome: Review
• Latest audit: May 28, 2026 at 11:05 AM UTC
• Version:
  0.1.7

Overview

This ZenTao helper is mostly coherent, but it can change or delete project data and may activate on generic project-management requests.

Install only if you want agents to use your ZenTao instance. Keep usage tied to explicit ZenTao requests, review the external zentao-cli package before installing it globally, and require clear confirmation before any create, update, delete, user, file, or status-change operation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 78% confidence
• Finding: The trigger description is very broad and can activate on generic project-management requests such as querying progress, bugs, tasks, or requirements. In an agent setting, this can cause the skill to be invoked in contexts the user did not explicitly intend, leading to unintended reads or state-changing operations against a ZenTao instance.

VirusTotal

VirusTotal findings are pending for this skill version.