스킬 vibe-kanban

📦

vibe-kanban

Name: vibe-kanban
Author: supercent-io

v1.2.0 콘텐츠 리비전 r1 치명적 🌐 네트워크 접근🔑 환경 변수📁 파일 시스템 접근⚙️ 외부 명령어

Kanban 보드에서 AI 에이전트 조율

병렬 AI 코딩 작업은 브랜치, 로그, 풀 리퀘스트 전반에서 추적하기 어렵습니다. 이 skill은 로컬 보드, MCP 연결, worktree 격리, 리뷰 흐름을 위한 실용적인 Vibe Kanban 설정 가이드를 제공합니다.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

이 Skill을 자동으로 설치하지 마세요.

공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "vibe-kanban" from https://skillstore.io/skills/supercent-io-vibe-kanban.md and its manifest at https://skillstore.io/api/skills/supercent-io-vibe-kanban/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/supercent-io-vibe-kanban.md 서명된 manifest GET /api/skills/supercent-io-vibe-kanban/manifest 서명된 lockfile GET /api/skills/supercent-io-vibe-kanban/lockfile

테스트해 보기

"vibe-kanban" 사용 중입니다. Start Vibe Kanban for a repository on a non-default port.

예상 결과:

Node 사용 가능 여부, 선택한 port, 로컬 보드 URL, browser 동작, 에이전트 인증 상태를 다루는 간결한 체크리스트입니다.

"vibe-kanban" 사용 중입니다. Plan three independent cards for a billing feature.

예상 결과:

제안 에이전트, 예상 files 또는 areas, review evidence, pull request boundaries가 포함된 범위가 명확한 card title 세 개입니다.

"vibe-kanban" 사용 중입니다. Review stale Vibe Kanban worktrees before cleanup.

예상 결과:

명확히 merge된 worktrees와 수동 승인이 필요한 branches를 구분하는 cleanup 권장 사항입니다.

보안 감사

치명적

v4 • 2026. 7. 7. 버전별 보고서 열기

The audit confirmed a critical Docker deployment risk from combining an unpinned container image with a host Docker socket mount. Additional confirmed risks include sourcing .env as shell code, persistent hidden agent configuration writes, secret-printing troubleshooting guidance, unpinned npx execution, and destructive cleanup behavior. Most Markdown backtick, localhost URL, loopback IP, and placeholder secret detections were false positives in documentation context.

스캔된 파일

1,394

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (11)

치명적

templates/docker-compose.yml:17

Docker socket access

- /var/run/docker.sock:/var/run/docker.sock

The Docker Compose template mounts /var/run/docker.sock into the container. A compromised container or dependency could control the host Docker daemon and escalate to host-level access.

치명적

templates/docker-compose.yml:5 templates/docker-compose.yml:17

Unpinned Docker Image with Host Docker Access

The Docker template uses the latest Vibe Kanban image while also mounting the host Docker socket. A future or compromised image release would receive direct access to the host Docker daemon.

The compose file directly uses an unpinned latest image and mounts /var/run/docker.sock. The combination creates a clear supply-chain path to host-level control.

높음

scripts/start.sh:78

Environment file access

# .env 파일 로드 (존재하는 경우)

The start script loads a local .env file and line 82 sources it as shell code. A malicious or unreviewed .env can execute commands and expose secrets when the wrapper runs.

높음

scripts/start.sh:79

Environment file access

if [[ -f ".env" ]]; then

The start script loads a local .env file and line 82 sources it as shell code. A malicious or unreviewed .env can execute commands and expose secrets when the wrapper runs.

높음

scripts/start.sh:80

Environment file access

info ".env 파일 로드 중..."

The start script loads a local .env file and line 82 sources it as shell code. A malicious or unreviewed .env can execute commands and expose secrets when the wrapper runs.

높음

scripts/start.sh:82

Environment file access

source .env

The start script loads a local .env file and line 82 sources it as shell code. A malicious or unreviewed .env can execute commands and expose secrets when the wrapper runs.

높음

SKILL.md:124

Environment file access

Set in `.env` file before starting the server.

The skill tells users to place configuration in a .env file before startup. In this package, the start script sources .env as shell, so the guidance can lead to executing untrusted env-file content.

높음

SKILL.md:70-75 scripts/start.sh:109-113

Unpinned npx Package Execution

The skill repeatedly starts Vibe Kanban through npx without pinning a package version or checksum, including the executable start wrapper. This creates supply-chain risk because a future package release or dependency compromise would run in the user workspace.

The command examples and start script directly invoke npx vibe-kanban without a pinned version. npx execution is legitimate for this tool but high impact because it runs external package code locally.

확인된 11건 모두 보기

높음

scripts/start.sh:78-82

Environment File Sourced as Shell Code

The start script loads .env with shell source instead of parsing key-value pairs. A crafted .env can execute arbitrary shell commands before Vibe Kanban starts.

Line 82 directly uses source .env, which executes shell syntax from the file. This is a clear code execution risk when .env content is untrusted or copied from another source.

높음

SKILL.md:417-423

Auto-Approved Agent Actions Increase Blast Radius

The skill documents Auto Approve as enabled by default for agents. In a board that launches coding agents in git worktrees, default approval can allow broad filesystem and command actions before human review.

The documentation explicitly states Auto Approve is on by default and the surrounding workflow runs agent CLIs against repositories. The exact runtime permissions depend on agent configuration, so confidence is high but not absolute.

중간

scripts/cleanup.sh:70-88

Cleanup Script Can Force Delete Worktrees and Branches

The cleanup helper identifies Vibe Kanban worktrees and can force-remove worktrees and delete branches. A parsing error or broad --all run can remove local work that has not been reviewed.

The script loops over detected worktrees and runs forced removal and branch deletion commands. It supports dry-run, but the destructive path is present and automated.

기능 검토 항목 (21)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음

scripts/mcp-setup.sh:61

Hidden file access

CLAUDE_CONFIG="$HOME/.claude/claude_desktop_config.json"

The MCP setup script targets hidden Claude configuration under the user home directory. Writing agent MCP configuration is persistent and can change future tool execution behavior.

높음

scripts/mcp-setup.sh:62

Hidden file access

CLAUDE_DIR="$HOME/.claude"

The MCP setup script targets hidden Claude configuration under the user home directory. Writing agent MCP configuration is persistent and can change future tool execution behavior.

높음

scripts/mcp-setup.sh:97

Hidden file access

CODEX_CONFIG="$HOME/.codex/config.toml"

The MCP setup script targets hidden Codex configuration under the user home directory. Writing agent MCP configuration is persistent and can change future tool execution behavior.

높음

scripts/mcp-setup.sh:98

Hidden file access

CODEX_DIR="$HOME/.codex"

The MCP setup script targets hidden Codex configuration under the user home directory. Writing agent MCP configuration is persistent and can change future tool execution behavior.

높음

SKILL.md:140

Hidden file in home directory

`~/.claude/settings.json` or project `.mcp.json`: