ClawHub

Dingtalk Teambition Project

v0.0.1

Use for anything related to Teambition tasks and projects. Triggers on: checking my todos, what tasks are due today or this week, create a task, update task...

⭐ 1· 179·1 current·1 all-time
byqijian@qijian2026
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (Teambition task/project operations) matches the included Python CLI scripts and the network calls to open.teambition.com. Required binaries (python3 and the 'uv' tool) and the single primary credential TEAMBITION_USER_TOKEN are appropriate for this purpose.
✓
Instruction Scope
SKILL.md instructs only Teambition-related actions (query/create/update tasks, upload files, query members, etc.). Runtime logic reads the TEAMBITION_USER_TOKEN (or a local user-token.json) and calls Teambition APIs; there are no instructions to read unrelated system files, exfiltrate data to third-party endpoints, or perform unrelated operations.
ℹ
Install Mechanism
Install spec uses Homebrew formulas to install python and a tool called 'uv'. Installing via a well-known package manager is low risk; however 'uv' is a nonstandard tool (used here for dependency/scripting) so users should confirm availability/trust of that package in their environment. No arbitrary URL downloads or archive extraction were declared.
✓
Credentials
Only TEAMBITION_USER_TOKEN is required (with a fallback TB_USER_TOKEN or local user-token.json). The code looks up token in env or local files within the project directory (and script dir/parent) — this is consistent with the described authentication model and not excessive.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide config, and is user-invocable. Autonomous invocation (disable-model-invocation=false) is the platform default and not a special privilege in this package.
Assessment
This skill appears to do what it says: a set of Python scripts that call the Teambition API and require a Teambition User Token. Before installing, confirm you trust the skill source (metadata shows no homepage/source), and keep these precautions: - Provide TEAMBITION_USER_TOKEN with a least-privilege account if possible and avoid embedding tokens in repo files. The tool will read user-token.json from the working directory or the scripts folder if present — do not commit such files to source control. - Verify the 'uv' tool (used for dependency management) is what you expect on your platform before installing via brew. - Review the network endpoint (https://open.teambition.com) and confirm it matches your organization’s Teambition instance. - If you need higher assurance, skim the included scripts (call_api.py and others are present) to confirm there are no additional network calls or hidden endpoints. Otherwise the package is internally coherent and proportionate for a Teambition integration.

Like a lobster shell, security has layers — review code before you run it.

latestvk975r3w3vc4xm8aws77gjcm98d834cgw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3, uv
Primary envTEAMBITION_USER_TOKEN

Install

Install Python (brew)
Bins: python3
brew install python
Install uv (brew)
Bins: uv
brew install uv

Comments