zentao-testtask

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the zentao-cli binary to be installed on the system to perform its functions.
  • Evidence: The metadata section in SKILL.md specifies requires: bins: ["zentao-cli"].
  • Context: This is a legitimate requirement for a skill designed to provide a CLI-based interface for ZenTao management.
  • [DATA_EXPOSURE]: The skill retrieves project and task metadata (IDs, names, status) from a ZenTao instance and presents it to the agent.
  • Evidence: Commands like zentao-cli testtask list and zentao-cli testtask get output structured data including IDs and names.
  • Context: This data ingestion is the primary purpose of the skill and does not involve sensitive system credentials or unauthorized file access.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 09:55 AM
Security Audit — agent-trust-hub — zentao-testtask