← Back to Skills Marketplace
354
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install yinan-task-automator
Description
Automate repetitive computer tasks including file operations, data processing, web scraping, and API integrations. Use when you need to batch process files,...
Usage Guidance
Proceed cautiously. The package appears incomplete: SKILL.md references several scripts and a base_task that are not included, and API/e‑commerce features are placeholders. Before running: 1) Inspect the code (especially any scripts that perform file operations) and test with --dry-run on non-critical directories; 2) Don’t provide real API credentials or schedule jobs until you have the missing workflow/scheduler code and have reviewed how secrets are used; 3) Run the tool in a sandbox or VM first to observe behavior; 4) Ask the publisher for the complete source (schedule_task.py, run_workflow.py, convert_data.py, base_task, tasks/ registry) and for clarification on how API keys will be handled. If you need production API/e‑commerce automation, prefer a package that documents required credentials and includes the referenced scripts.
Capability Analysis
Type: OpenClaw Skill
Name: yinan-task-automator
Version: 1.0.0
The skill bundle provides a framework for task automation, including file management and data processing. The `scripts/run_task.py` script contains a path traversal vulnerability in the `task_file_organizer` function, as it joins user-controlled folder names from the configuration file with the destination path without sanitization. Additionally, the script includes placeholders for high-risk capabilities such as API synchronization and web monitoring, which are consistent with the stated purpose but fall under the 'suspicious' classification due to their inherent risk and the lack of input validation.
Capability Assessment
Purpose & Capability
The name/description and the included run_task.py align with file organization and data conversion capabilities. However, the SKILL.md advertises broader features (scheduling, workflows, API sync, e-commerce integrations) that are either placeholders in run_task.py or implemented by scripts referenced in the docs but not included in the bundle (e.g., schedule_task.py, run_workflow.py, convert_data.py, base_task). The examples live under tasks-examples/ while documentation refers to tasks/ which is inconsistent.
Instruction Scope
SKILL.md instructs running several scripts that do not exist in the package (schedule_task.py, run_workflow.py, convert_data.py, etc.). The provided run_task.py performs real file operations (shutil.move) and will move files under the user's home by default, which is expected for a file organizer but can be destructive if misconfigured. The docs also recommend storing API keys in environment variables, yet the code has placeholders for API/web/e‑commerce tasks and does not show how secrets would be used—this mismatch increases risk because users may supply credentials to workflows that are not fully implemented or audited.
Install Mechanism
There is no install specification (instruction-only with one code file). Nothing is downloaded or extracted during install, which minimizes supply-chain risk.
Credentials
The registry declares no required environment variables, but SKILL.md recommends using environment variables/.env for API keys and secrets. For real API or e‑commerce usage the skill will require credentials, but those are not documented as required in the metadata. This disconnect means credentials would be provided ad hoc (not scoped or validated), increasing risk if users supply high‑privilege keys without understanding where/how they are used.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes logs to a local logs/ directory and can create/move files/directories under user paths; that is expected behavior for an automation tool but should be used with caution.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install yinan-task-automator - After installation, invoke the skill by name or use
/yinan-task-automator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Task Automator for OpenClaw.
- Automate file operations, data processing, web scraping, and API integrations.
- Built-in tasks for file organization, data conversion, API sync, web monitoring, and e-commerce order processing.
- Includes tools for scheduling recurring tasks using cron expressions.
- Supports creation of custom tasks and multi-step automation workflows.
- Provides security, troubleshooting, and best practices guidelines.
Metadata
Frequently Asked Questions
What is Task Automator?
Automate repetitive computer tasks including file operations, data processing, web scraping, and API integrations. Use when you need to batch process files,... It is an AI Agent Skill for Claude Code / OpenClaw, with 354 downloads so far.
How do I install Task Automator?
Run "/install yinan-task-automator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Task Automator free?
Yes, Task Automator is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Task Automator support?
Task Automator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Task Automator?
It is built and maintained by Yinanping (@yinanping-cpu); the current version is v1.0.0.
More Skills