← Back to Skills Marketplace
14631
Downloads
12
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install mission-control
Description
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con...
Usage Guidance
Install only if you want a GitHub-backed, webhook-driven automation system, not just a local kanban board. Use a dedicated least-privilege GitHub token, avoid shared browser profiles, configure a real webhook secret, restrict dashboard and repository access, avoid exposing the CORS proxy publicly, and review every setup step before allowing it to push code, enable Funnel, or wake an agent automatically.
Capability Analysis
Type: OpenClaw Skill
Name: mission-control
Version: 2.3.1
The skill bundle is classified as suspicious due to multiple critical vulnerabilities. The `scripts/mc-update.sh` contains a shell injection vulnerability where insufficient input sanitization allows arbitrary command execution via crafted task IDs in `git commit` messages. The `assets/index.html` dashboard is vulnerable to DOM-based XSS through `javascript:` URLs in task descriptions and comments, as the `renderMarkdown` function does not properly sanitize `href` attributes. Furthermore, user-controlled task content (title, description, comments) is used to construct prompts for the AI agent via `assets/transforms/github-mission-control.mjs` (webhook transform) and `assets/index.html` (cron creation), posing a significant prompt injection risk. An additional vulnerability is the open CORS proxy in `scripts/cors-proxy.js`, which could be abused if exposed publicly.
Capability Assessment
Purpose & Capability
The core task-board and agent work-order flow is coherent with the stated purpose, but the bundle also includes operational cron management, repository writes, collaborator enumeration, Slack notifications, and gateway control that materially exceed a simple kanban dashboard.
Instruction Scope
The docs disclose many advanced behaviors, but they frame setup as automatic and make conflicting security claims, including saying the dashboard stores no tokens while the HTML stores GitHub and gateway tokens in localStorage.
Install Mechanism
Setup instructions include copying files, creating ~/.clawdbot config, installing a persistent webhook transform, configuring GitHub webhooks, enabling Tailscale Funnel, pushing to GitHub, and enabling Pages. These are user-directed, but high-impact and not strongly gated by explicit consent boundaries.
Credentials
The skill uses GitHub repo-scope PATs, local gh CLI token files, gateway bearer tokens, optional Slack tokens, outbound GitHub/Slack/gateway calls, and public tunnel guidance. This can be proportionate for full automation, but it is broad and under-scoped for users expecting only local task tracking.
Persistence & Privilege
The webhook transform can persist under ~/.clawdbot/hooks-transforms and wake the agent on future GitHub events; HMAC verification fails open when no secret file exists, and the CORS proxy binds to 0.0.0.0 with wildcard CORS.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mission-control - After installation, invoke the skill by name or use
/mission-control - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.3.1
Fix: Renamed from 'Jeannie Control' to 'Mission Control'. Removed private cron data from demo crons.json. Clean demo data only.
v2.3.0
Add OpenClaw Gateway /tools/invoke integration: gatewayInvoke(), Gateway Token UI, cron API migration, loadCronsFromGateway()
v2.2.2
Security: User data (tasks.json, crons.json) excluded from git tracking. Demo templates added. Branch protection enabled on public repo.
v2.2.1
Security hardening: input sanitization in mc-update.sh, Security docs in SKILL.md/README.md. Features: Version Update Banner, Processing Timer with timeout warning.
v2.0.0
Initial ClawdHub release: Kanban dashboard for AI assistants with GitHub Pages hosting, webhook automation, and CLI tools
Metadata
Frequently Asked Questions
What is Mission Control?
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con... It is an AI Agent Skill for Claude Code / OpenClaw, with 14631 downloads so far.
How do I install Mission Control?
Run "/install mission-control" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mission Control free?
Yes, Mission Control is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Mission Control support?
Mission Control is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mission Control?
It is built and maintained by rdsthomas (@rdsthomas); the current version is v2.3.1.
More Skills