📋 Vikunja-complete — 专业的Vikunja任务/项目管理
v4.0.0面向生产环境的Vikunja任务和项目管理技能,提供确定性的命令和强大的验证。通过命令行接口(CLI)与Vikunja API交互,支持任务、评论、标签、分配、视图、Webhook、附件、关系、过滤器、通知、订阅和API令牌的管理。
0· 262·0 当前·0 累计
安全扫描
OpenClaw
安全
high confidence该技能的请求和包含的脚本与Vikunja CLI集成一致:仅需curl/jq、Vikunja URL和API令牌,执行对声明的Vikunja主机的API调用。
评估建议
该包看起来像它声称的那样工作:一个用于Vikunja的确定性CLI。启用前:(1)仅提供最小权限的VIKUNJA_TOKEN(考虑创建一个范围/测试令牌);(2)如果您想验证行为,请对非生产Vikunja实例运行包含的冒烟测试(创建项目/任务/标签/令牌);(3)自己审查vikunja.sh脚本(已包含),确认没有添加意外的网络端点或持久性;并且(4)由于技能作者在元数据中不是一个已知的发布者,建议在沙盒中或使用有限的凭据使用它,直到您感到舒适。...详细分析 ▾
✓ 用途与能力
Name/description match behavior: the skill implements a CLI wrapper (vikunja.sh) that talks to the Vikunja API. Required binaries (curl, jq) and required env vars (VIKUNJA_URL, VIKUNJA_TOKEN) are consistent with that purpose.
ℹ 指令范围
SKILL.md and the included scripts constrain operations to the Vikunja API (tasks, comments, labels, attachments, webhooks, tokens, etc.). The optional smoke test will create/modify resources (projects, tasks, labels, tokens) on the target Vikunja instance — this is expected for an integration but is state-modifying, so run against a test instance or with a limited-scope token if you want to avoid side effects.
✓ 安装机制
No external install/download spec is present; the package is instruction+script-based. There are no remote URLs being downloaded or extracted during install, which lowers supply-chain risk.
✓ 凭证需求
Only VIKUNJA_URL and VIKUNJA_TOKEN (plus optional retry env vars) are required. These are appropriate and proportionate for an API client. Note: VIKUNJA_TOKEN is sensitive and grants access to the target instance.
✓ 持久化与权限
Skill is not marked always:true and does not request elevated platform persistence. It does not modify other skills or system-wide configs; autonomous invocation is allowed at the platform default level (not an additional concern here).
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv4.0.02026/3/12
["主要重写:自定义Vikunja技能,具有生产级命令脚本和强大的验证。","添加了通过确定性的shell命令进行全面任务、评论、标签、分配、视图、Webhook、附件、关系、过滤器、通知、订阅和API令牌管理。","包含了需要curl、jq和环境变量的强固设置说明。","包含了端到端验证的冒烟测试框架。"]
● 可疑
安装命令 点击复制
官方npx clawhub@latest install vikunja-complete
镜像加速npx clawhub@latest install vikunja-complete --registry https://cn.clawhub-mirror.com
技能文档
# Vikunja (Custom Core) 生产环境专用自定义Vikunja技能。 ## 设置 ``bash export VIKUNJA_URL="https://your-vikunja-host" export VIKUNJA_TOKEN="` 脚本路径: `bash {baseDir}/scripts/vikunja.sh ` ## 核心任务命令 `bash {baseDir}/scripts/vikunja.sh health {baseDir}/scripts/vikunja.sh list --project "Inbox" --limit 25 ... `` (注:由于字符限制,以下内容仅示例,完整内容请参考原文)
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制