禅道-ZenTao
Security checks across malware telemetry and agentic risk
Overview
This appears to be a disclosed ZenTao API integration, but it requires ZenTao credentials and includes create/update/delete capabilities that users should control carefully.
Before installing, confirm you are comfortable storing ZenTao credentials in TOOLS.md, use a least-privilege account, and carefully review any create/update/delete operation before confirming it.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If configured with a powerful ZenTao account, the agent could access or modify sensitive project-management data through that account.
The skill requires ZenTao account credentials to authenticate to the user's ZenTao instance. This is purpose-aligned for an API integration, but it grants whatever ZenTao permissions that account has.
ZenTao API credentials are stored in the `TOOLS.md` file ... - **Username:** <your-username> - **Password:** <your-password>
Use a least-privilege ZenTao account, protect TOOLS.md, and do not commit or share the credential file.
Confirmed actions could create, change, or delete ZenTao business records and users.
The skill documents broad mutation authority over ZenTao users and project-management objects. It also states these actions require confirmation, making this disclosed and purpose-related rather than hidden.
Action Operations (Confirmation Required) ... Create user ... Update user info ... Delete user ... Create project ... Update project ... Delete project
Review every proposed create/update/delete action before confirming, and prefer a read-only ZenTao account if you only need queries.
The skill may fail until the missing dependency is installed, and users may need to verify what they install.
The code imports httpx, but the provided requirements.txt only lists requests and beautifulsoup4. This looks like an incomplete dependency declaration rather than malicious behavior.
import requests import httpx
Install dependencies from trusted package indexes and confirm whether httpx is required before use.