zentao-cli
Manage ZenTao Workflows with CLI
ZenTao data is difficult to query consistently across projects, bugs, tasks, requirements, and tests. This skill maps user requests to zentao CLI commands and response formats.
This skill is part of a pack
Install the whole pack to get every skill the task needs, in one command.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "zentao-cli" from https://skillstore.io/skills/easysoft-zentao-cli.md and its manifest at https://skillstore.io/api/skills/easysoft-zentao-cli/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "zentao-cli". Show active bugs for product 1.
Expected outcome:
A table of matching bugs with ID, title, priority, severity, assignee, and status, followed by a short triage summary.
Using "zentao-cli". What tasks are assigned in execution 8?
Expected outcome:
A concise task list grouped by assignee, with status, estimate, consumed time, and blocked items highlighted.
Using "zentao-cli". Create a story for the login redesign.
Expected outcome:
A confirmation message that restates the product, title, assignee, priority, and planned change before any write action.
Security Audit
High RiskThe Ruby backtick execution alerts are false positives caused by Markdown command examples, and the hardcoded URL alerts are documentation examples. Real risk remains around ZenTao credential handling, credential caching in a hidden home config path, unpinned package installation, and delete workflows that can bypass CLI prompts. No prompt injection attempt or obfuscated payload was found in SKILL.md.
Confirmed security concerns (3)
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (78)
🌐 Network access (2)
📁 Filesystem access (2)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/easysoft-zentao-cli/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/easysoft-zentao-cli?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/easysoft-zentao-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/easysoft-zentao-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/easysoft-zentao-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
easysoft. (2026). zentao-cli security audit report (audit version 4) [Author version 0.1.2]. Skillstore. https://skillstore.io/skills/easysoft-zentao-cli/audits/4BibTeX citation
@techreport{easysoft-easysoft-zentao-cli-2026,
author = {easysoft},
title = {zentao-cli security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/easysoft-zentao-cli/audits/4},
note = {Author version 0.1.2}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "zentao-cli security audit report (audit version 4)"
version: "0.1.2"
type: report
authors:
- name: "easysoft"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/easysoft-zentao-cli/audits/4"
identifiers:
- type: other
value: "skillstore:easysoft-zentao-cli:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: MediumWhat You Can Build
Check Project Progress
Review active projects, executions, owners, and status fields without opening the ZenTao web interface.
Triage Product Bugs
Find active bugs for a product, sort by priority, and summarize the items that need attention.
Update Development Work
Create tasks, start work, finish work, or update requirements after confirming the intended record changes.
Try These Prompts
List my active ZenTao projects and show the project IDs, names, and status.
Find active bugs for product 12, sort by priority and severity, and summarize the top 10.
Create a task in execution 8 assigned to liu with a four-hour estimate after I confirm the details.
Audit release readiness for product 5 by checking unresolved bugs, open test tasks, and recent builds.
Best Practices
- Confirm every create, update, delete, and state transition before execution.
- Use field selection and pagination for large result sets.
- Prefer interactive authentication or protected tokens over passwords in command history.
Avoid
- Running destructive commands without a clear user confirmation.
- Passing real passwords in visible prompts, shell history, or shared transcripts.
- Fetching all records when filtered or paginated results would answer the request.