zentao-task

Warn

Audited by Socket on May 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s task-management capabilities are broadly aligned with its purpose, but trust in the required `zentao-cli` is not fully clean. The main concerns are external CLI provenance ambiguity, inconsistent authentication documentation, and consequential task-modification actions; there is no clear evidence of credential theft or malicious exfiltration in the provided material.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
May 9, 2026, 06:12 AM
Package URL
pkg:socket/skills-sh/imyuyu%2Fzentao-cli%2Fzentao-task%2F@6d34fef582bbcf6014562f20ca64a58bc0ede507
Security Audit — socket — zentao-task