ClawHub

huodongyuan

v1.0.0

Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...

⭐ 0· 231·0 current·0 all-time
by@manman1104
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary (wekancli), required env vars (WEKAN_URL, WEKAN_TOKEN), and the install entry all match a WeKan CLI integration. Nothing requested appears unrelated to the stated purpose.
✓
Instruction Scope
SKILL.md only instructs the agent to run normal wekancli commands (list, create, edit, archive, login). It does not ask the agent to read unrelated files, access other credentials, or post data to external endpoints beyond the WeKan instance.
ℹ
Install Mechanism
Install uses a git+https GitHub package (wekan-cli @ git+https://github.com/madsmith/wekan_cli.git) to provide the wekancli binary. Pulling from a public GitHub repo is common for CLI tools but is higher risk than relying on a vetted package repository — verify the upstream repository and its releases before installing.
✓
Credentials
Only WEKAN_URL and WEKAN_TOKEN are required and WEKAN_TOKEN is declared as the primary credential. These are appropriate and proportionate for a Wekan CLI integration. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not declare any persistent global modifications. disable-model-invocation is false (default) which is expected; this alone is not a concern.
Assessment
This skill appears coherent with its stated purpose, but it will need a WEKAN_TOKEN that grants access to your Wekan account. Before installing: (1) Prefer creating a dedicated, least-privilege account/token for the agent rather than using an admin or personal token; (2) verify the GitHub repo (madsmith/wekan_cli) and its code/releases before allowing the install, since the installer pulls code from that repo; (3) ensure you trust the host network access to your Wekan instance because the agent will call the WEKAN_URL endpoint; (4) avoid providing tokens with broad admin rights if the skill only needs to create/move/archive cards. If you want higher assurance, inspect the upstream wekancli code or install the CLI yourself and point the skill to the existing binary rather than letting it install automatically.

Like a lobster shell, security has layers — review code before you run it.

latestvk9794n3n593mbdv3a800rcvnk582jay1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📋 Clawdis
Binswekancli
EnvWEKAN_URL, WEKAN_TOKEN
Primary envWEKAN_TOKEN

Install

Install Wekan CLI (uv)
Bins: wekancli
uv tool install wekan-cli @ git+https://github.com/madsmith/wekan_cli.git

Comments