← Back to Skills Marketplace
75
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openspace-delegate-task
Description
Delegate tasks to OpenSpace — a full-stack autonomous worker for coding, DevOps, web research, and desktop automation, backed by an extensive MCP tool and sk...
Usage Guidance
This skill can read local skill directories and upload or download skills from a cloud community but does not declare the cloud credential it expects and lacks safeguards about what it may publish. Before installing or invoking it, consider: 1) Ask the publisher what cloud API key name(s) are required and why they weren't declared. 2) Require explicit, per-upload confirmation (do not allow automatic public uploads). 3) Disable auto_import and set search_scope='local' unless you trust the cloud community. 4) Restrict skill_dir paths to a dedicated, audited folder that contains no secrets or credentials. 5) If you must use it, monitor network traffic and audit any files saved/created by the skill. If the publisher cannot explain the missing credential declaration or cannot show safeguards preventing accidental uploads of sensitive files, treat the skill as high-risk and avoid installing it.
Capability Analysis
Type: OpenClaw Skill
Name: openspace-delegate-task
Version: 1.0.0
The skill provides high-risk capabilities for delegating arbitrary tasks to an autonomous worker (execute_task) and uploading local directory contents to a cloud community (upload_skill). It also includes an 'auto_import' feature in search_skills that automatically downloads remote skills, which introduces supply-chain risks. While these functions align with the stated purpose of task delegation and skill evolution, the combination of remote code execution primitives and data exfiltration mechanisms warrants a suspicious classification. File: SKILL.md.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (delegation to a cloud MCP called OpenSpace) matches the instructions (execute_task/search_skills/fix_skill/upload_skill). However, the skill declares no required environment variables or credentials while the instructions repeatedly reference cloud operations (search_scope='all', auto_import top cloud skills, upload_skill requires a cloud API key). Not declaring the cloud API key/credential is an incoherence between claimed capabilities and declared requirements.
Instruction Scope
SKILL.md instructs the agent to operate on arbitrary local paths (skill_dir) and to auto-download or auto-import cloud skills into local directories. It directs the agent to 'decide whether to upload' evolved skills and to upload with public visibility by default in some cases. Those instructions allow reading and transmitting arbitrary local directories (which may contain secrets) and lack constraints or explicit user confirmation requirements.
Install Mechanism
This is an instruction-only skill with no install spec or code files; that minimizes on-disk installation risk. There is no external download/install mechanism to evaluate here.
Credentials
The skill requests no environment variables or primary credential in metadata, yet the text explicitly mentions a 'cloud API key' is required for upload and that search_scope falls back to local-only 'if no API key'. This omission is disproportionate and inconsistent: a skill that interacts with a cloud community should declare the credential(s) it needs and justify why uploads/downloads are necessary.
Persistence & Privilege
The skill is not set to always: true (so it's not force-included), and model invocation is allowed (default). While autonomous invocation alone is normal, combined with the ability to read arbitrary skill_dir paths and perform uploads/downloads to a cloud community, the agent could autonomously exfiltrate or publish local content unless there are external safeguards. The SKILL.md does not describe prompting the user or restricting which directories may be uploaded.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openspace-delegate-task - After installation, invoke the skill by name or use
/openspace-delegate-task - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the delegate-task skill for OpenSpace.
- Enables delegating coding, DevOps, web research, and automation tasks to OpenSpace via MCP tooling.
- Provides four tools: execute_task, search_skills, fix_skill, and upload_skill.
- Supports autonomous skill improvement and sharing through a cloud community.
- Clear guidance included for when and how to delegate, fix, or upload skills.
- Usage instructions and parameters documented for each tool.
Metadata
Frequently Asked Questions
What is OpenSpace Delegate Task?
Delegate tasks to OpenSpace — a full-stack autonomous worker for coding, DevOps, web research, and desktop automation, backed by an extensive MCP tool and sk... It is an AI Agent Skill for Claude Code / OpenClaw, with 75 downloads so far.
How do I install OpenSpace Delegate Task?
Run "/install openspace-delegate-task" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenSpace Delegate Task free?
Yes, OpenSpace Delegate Task is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenSpace Delegate Task support?
OpenSpace Delegate Task is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenSpace Delegate Task?
It is built and maintained by X-RayLuan (@x-rayluan); the current version is v1.0.0.
More Skills