禅道-ZenTao

This skill appears internally consistent for integrating with a self-hosted ZenTao instance, but consider these practical cautions before installing: 1) Source/attribution is unknown and there is no homepage — if you rely on it in production, review the full read_credentials implementation and the code paths that log or print responses to ensure credentials are not inadvertently recorded. 2) TOOLS.md holds plaintext credentials — do not commit it to version control; prefer a token or scoped account and use HTTPS endpoints. 3) The code performs network requests to the endpoint you configure; verify you trust the ZenTao host and that credentials are rotated and limited in scope. 4) Action (create/update/delete) flows require interactive confirmation via input(); if you plan to run this non-interactively (as an autonomous agent) test how confirmation is handled so it cannot be abused to perform writes without explicit consent. 5) If you want higher assurance, run the package in an isolated environment, review the full source (especially any omitted helper functions), and confirm there are no hidden remote URLs or logging of secrets.