Planka
v0.1.1Manage Planka (Kanban) projects, boards, lists, cards, and notifications via a custom Python CLI.
⭐ 1· 1.9k·1 current·1 all-time
by@voydz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match the declared requirement (planka-cli). The commands in SKILL.md are consistent with a CLI for managing Planka resources.
Instruction Scope
Instructions are narrowly scoped to using the planka-cli (status, projects, boards, cards, login/logout). However the doc suggests running `python3 scripts/planka_cli.py` (a script path that is not provided by the skill) and instructs storing credentials via `planka-cli login` without specifying how/where credentials are stored.
Install Mechanism
There is no formal install spec in the registry; SKILL.md instructs `brew tap voydz/homebrew-tap` and `brew install planka-cli` — a third‑party Homebrew tap. Installing from an untrusted tap can install arbitrary binaries; the skill provides no provenance or official release links to verify the package.
Credentials
The skill declares no required env vars, which is reasonable. But it instructs the user to `login` with username/password and to 'store credentials' without documenting where those credentials are saved or what protections (keychain, encrypted file) are used — this is a potential privacy/risk consideration.
Persistence & Privilege
always is false and the skill does not request system-wide configuration changes or persistent automatic inclusion. It does not claim elevated privileges.
What to consider before installing
This skill appears to do what it says (wrap a Planka CLI), but exercise caution before installing or running anything it recommends. The SKILL.md tells you to tap and install a third‑party Homebrew tap (voydz/homebrew-tap) — review that tap/formula and the upstream project before installing because Homebrew taps can deliver arbitrary binaries. The docs also mention running a local script path (`scripts/planka_cli.py`) that is not included with the skill; do not run unknown Python scripts you can't inspect. If you need this functionality, prefer installing planka-cli from an official source (GitHub releases or the project's own docs), inspect the formula or source code, and verify how/where the CLI stores credentials (avoid entering passwords into tools that store them in plaintext). If you proceed, audit the installed binary (or run it in an isolated environment) and avoid granting broader access than necessary.Like a lobster shell, security has layers — review code before you run it.
latestvk97esca5qpm9d8gvdm3n92jx61801c80
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📋 Clawdis
Binsplanka-cli