Queue Task

Durable queue-task helper for resumable, idempotent batch jobs in task-father task folders.

This skill is a local helper for managing durable queue state and appears coherent and low-risk. Before installing or running it: 1) Inspect and, if needed, edit config.env to set WORKSPACE_DIR to a path you control (the default is /home/miles/.openclaw/workspace which may not exist on your machine). 2) Run the script as an unprivileged user (don't run as root) to avoid unintended file writes to system-owned locations. 3) Test in a disposable workspace to confirm behavior (it will create queue.jsonl, progress.json, done.jsonl, failed.jsonl, lock.json and may write TASK.md/TODOS.md). 4) No network calls or secret env vars are required, but if you adapt the script to add integrations, re-review for credential use or external endpoints. If you want higher assurance, run the commands locally with --config pointing to a dedicated config.env and inspect created files after init/status.

Type: OpenClaw Skill Name: queue-task Version: 0.1.0 The skill bundle is suspicious due to a critical path traversal vulnerability in `scripts/queue_task.py`. The `slug` argument, which is user-controlled, is directly used in `resolve_dir` to construct file paths without proper sanitization. This allows an attacker to create or modify files outside the intended task directory (e.g., `../../../../tmp/malicious_file`), potentially leading to arbitrary file write and, in some scenarios, remote code execution.