← Back to Skills Marketplace
joelchance

Manus AI Agent

by joelchance · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
3703
Downloads
7
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install manus-ai
Description
Create and manage AI agent tasks via Manus API. Manus is an autonomous AI agent that can browse the web, use tools, and deliver complete work products.
README (SKILL.md)

Manus AI Agent

Create tasks for Manus, an autonomous AI agent, and retrieve completed work products.

Authentication

Set MANUS_API_KEY env var with your key from manus.im.


Commands

All commands use scripts/manus.sh.

Create a Task

{baseDir}/scripts/manus.sh create "Your task description here"
{baseDir}/scripts/manus.sh create "Deep research on topic" manus-1.6-max

Profiles: manus-1.6 (default), manus-1.6-lite (fast), manus-1.6-max (thorough).

Check Status

{baseDir}/scripts/manus.sh status \x3Ctask_id>

Returns: pending, running, completed, or failed.

Wait for Completion

{baseDir}/scripts/manus.sh wait \x3Ctask_id>
{baseDir}/scripts/manus.sh wait \x3Ctask_id> 300  # custom timeout in seconds

Polls until task completes or times out (default: 600s).

Get Task Details

{baseDir}/scripts/manus.sh get \x3Ctask_id>

Returns full task JSON including status and output.

List Output Files

{baseDir}/scripts/manus.sh files \x3Ctask_id>

Shows filename and download URL for each output file.

Download Output Files

{baseDir}/scripts/manus.sh download \x3Ctask_id>
{baseDir}/scripts/manus.sh download \x3Ctask_id> ./output-folder

Downloads all output files to the specified directory (default: current directory).

List Tasks

{baseDir}/scripts/manus.sh list

Typical Workflow

  1. Create task: manus.sh create "your prompt"
  2. Wait for completion: manus.sh wait \x3Ctask_id>
  3. Download results: manus.sh download \x3Ctask_id>

Advanced API Features

For file attachments, webhooks, connectors, projects, multi-turn conversations, and interactive mode, see the full Manus API documentation:


Security & Permissions

What this skill does:

  • Sends task prompts to the Manus API at api.manus.ai
  • Polls for task completion and downloads output files from Manus CDN
  • API key is sent only in the API_KEY header to api.manus.ai

What this skill does NOT do:

  • Does not upload local files (file upload is an advanced API feature not implemented in the bundled script)
  • Does not register webhooks or connect external accounts
  • Does not send your API key to any endpoint other than api.manus.ai
  • Does not modify local system configuration
  • Cannot be invoked autonomously by the agent (disable-model-invocation: true)
  • You must explicitly trigger every Manus task

Bundled scripts: scripts/manus.sh (Bash — uses curl and jq)

Review scripts/manus.sh before first use to verify behavior.

Usage Guidance
This skill appears to do what it says: it sends prompts to api.manus.ai and downloads result files. Before use: (1) review the bundled scripts (already included) and confirm you are comfortable with the API endpoint and header usage, (2) consider using a Manus API key with minimal scope and rotate/revoke it if needed, (3) be cautious opening downloaded files (they come from URLs returned by the API and may be arbitrary content), and (4) if you need stronger guarantees, test with a non-production API key and check network logs to verify requests go only to Manus domains.
Capability Analysis
Type: OpenClaw Skill Name: manus-ai Version: 1.0.1 The skill is classified as suspicious due to shell injection and path traversal vulnerabilities in `scripts/manus.sh`. Specifically, the `task_id` argument in several commands (e.g., `get`, `status`, `wait`, `files`, `download`) and the `output_dir` argument in the `download` command are directly interpolated into shell commands (`curl`, `mkdir`) without proper sanitization, allowing for arbitrary command execution. Additionally, the `output_dir` is not sanitized for path traversal, enabling files to be written to arbitrary locations. While `SKILL.md` correctly sets `disable-model-invocation: true` (mitigating autonomous agent exploitation) and the `create` command's prompt is properly sanitized with `jq -Rs .`, these direct shell vulnerabilities pose a significant risk if a malicious user invokes the skill.
Capability Assessment
Purpose & Capability
Name/description (create/manage Manus agent tasks) match the requested resources: curl and jq for HTTP/JSON work and a single MANUS_API_KEY. The script talks only to api.manus.ai and the flows (create, poll, list, download) align with an API client.
Instruction Scope
SKILL.md instructs use of the bundled scripts and explicitly documents behavior. The script only reads MANUS_API_KEY, calls the Manus API, polls status, and downloads files referenced in task outputs. It does not read other system files or environment variables, nor does it attempt to upload local files or modify system configuration.
Install Mechanism
Instruction-only skill with a small bundled bash script; no install spec and no external archive downloads. No high-risk install mechanisms observed.
Credentials
Only a single credential (MANUS_API_KEY) is required and used directly to authenticate requests to the Manus API. That is proportional to the client's functionality.
Persistence & Privilege
Skill is not always-on, and model invocation is disabled (agent cannot invoke autonomously). The skill does not attempt to change other skills or system-wide settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install manus-ai
  3. After installation, invoke the skill by name or use /manus-ai
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Version bump to 1.0.1 with no file or documentation changes. - No updates or modifications were detected in this release.
v1.0.0
Initial release of the Manus skill. - Enables creating, managing, and retrieving tasks from the Manus autonomous AI agent via CLI. - Supports task creation, status checks, polling for completion, and downloading results. - Allows selection of Manus agent profiles (default, lite, max). - Requires `MANUS_API_KEY` environment variable and `curl`, `jq` utilities. - Includes clear list of commands and describes access and security details.
Metadata
Slug manus-ai
Version 1.0.1
License
All-time Installs 1
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Manus AI Agent?

Create and manage AI agent tasks via Manus API. Manus is an autonomous AI agent that can browse the web, use tools, and deliver complete work products. It is an AI Agent Skill for Claude Code / OpenClaw, with 3703 downloads so far.

How do I install Manus AI Agent?

Run "/install manus-ai" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Manus AI Agent free?

Yes, Manus AI Agent is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Manus AI Agent support?

Manus AI Agent is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Manus AI Agent?

It is built and maintained by joelchance (@joelchance); the current version is v1.0.1.

💬 Comments