by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
安全
high confidenceThe skill does what it says: a small, dependency-free Asana CLI that uses a single Asana PAT (ASANA_PAT); its requirements, instructions, and code are consistent and proportionate to the stated purpose.
评估建议
This skill appears coherent and implements only the Asana PAT-based functionality it claims. Before installing: 1) Treat the ASANA_PAT like any API secret — inject it at runtime via OpenClaw's config (skills.entries.asana.apiKey or env injection) rather than pasting it into prompts; 2) Prefer a PAT with the minimal scope you can (or rotate it frequently); 3) Be aware the skill will create/read a local per-user config at ~/.openclaw/skills/asana.json (check that file's contents and filesystem per...详细分析 ▾
✓ 用途与能力
Name/description require a Personal Access Token and the skill declares ASANA_PAT as its primary env var. The included script(s) call Asana's API (app.asana.com) and implement task/project operations described in the docs — the requested credential and file accesses align with the stated functionality.
ℹ 指令范围
SKILL.md and README instruct the agent to use ASANA_PAT (or ASANA_TOKEN) and to call the CLI commands in scripts/asana.mjs. The CLI reads/writes a small local config (~/.openclaw/skills/asana.json) for convenience (defaults/contexts/event sync tokens). This is expected for workspace/context persistence, but users should be aware the skill will create/read that file in the home directory.
✓ 安装机制
There is no install spec and the repository is instruction+script only (single dependency-free Node ESM script). No remote downloads, no package manager installs, and no unusual installers are present.
✓ 凭证需求
Only ASANA_PAT (and optional ASANA_TOKEN alias) are required. That matches the described Asana PAT integration. No unrelated environment variables, cloud credentials, or secrets are requested.
✓ 持久化与权限
always is false and disable-model-invocation is default. The skill writes only its own local config file(s) under the user's home (~/.openclaw/skills/asana.json and legacy paths). It does not request elevated system-wide privileges or modify other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.2.02026/2/1
- Added comprehensive documentation in SKILL.md covering setup, authentication (ASANA_PAT), and usage patterns. - Detailed instructions for configuring the skill with OpenClaw, including best practices for secret handling. - Described supported Asana workflows: task management, project briefs, status updates, timelines, custom fields, and dependencies. - Provided command reference examples for core operations (e.g., creating tasks, searching, managing project briefs, custom fields). - Included notes on using Asana rich text/mentions and ensuring notification reliability.
● 可疑
安装命令
点击复制官方npx clawhub@latest install asana-agent-skill
镜像加速npx clawhub@latest install asana-agent-skill --registry https://cn.longxiaskill.com