ClawHub

Wekan

v1.5.0

Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...

⭐ 0· 399·0 current·0 all-time
by@madsmith
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requirements: the skill needs the wekancli binary and WEKAN_URL/WEKAN_TOKEN, which are exactly what a Wekan CLI integration requires.
✓
Instruction Scope
SKILL.md contains direct wekancli commands (list, create, edit, archive) and references the login flow. It does not instruct reading unrelated files, scanning system paths, or exfiltrating data to unexpected endpoints.
ℹ
Install Mechanism
Install spec pulls the wekan-cli package from a GitHub repository (git+https://github.com/madsmith/wekan_cli.git) via the 'uv' installer. This is a common pattern but carries the usual caveat: code will be fetched from a third‑party repo at install time, so verify the repository and maintainers before installing.
✓
Credentials
Only WEKAN_URL and WEKAN_TOKEN are required and WEKAN_TOKEN is declared as the primary credential. These are proportionate to controlling a Wekan instance. No unrelated secrets or multiple unrelated credentials are requested.
✓
Persistence & Privilege
The skill does not request always:true, does not require system config paths, and does not claim to modify other skills or global agent settings. Agent autonomous invocation is allowed (platform default).
Assessment
This skill appears to do exactly what it says: call the wekancli tool against a Wekan server. Before installing, confirm you trust the GitHub repo used by the install step. Provide a token with least privilege (create an agent-specific user/token rather than an admin token unless admin actions are intentionally needed). Store WEKAN_TOKEN securely (do not paste it into chat). Be cautious granting delete/admin rights to the agent — the references note deletion requires admin role. If you cannot verify the upstream repo, consider manually installing an audited CLI and ensuring the binary on PATH is the expected one.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ca6p2et9t39b7rtappj5mv581mh4mv1.5.0vk97ca6p2et9t39b7rtappj5mv581mh4m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📋 Clawdis
Binswekancli
EnvWEKAN_URL, WEKAN_TOKEN
Primary envWEKAN_TOKEN

Install

Install Wekan CLI (uv)
Bins: wekancli
uv tool install wekan-cli @ git+https://github.com/madsmith/wekan_cli.git

Comments