Qclaw Task Submitter

通过 QClaw 向 WorkBuddy 提交需要复杂执行的任务。当用户想要： - 通过微信/对话将任务交给 WorkBuddy 执行 - "帮我生成/制作/分析/整理..." - 需要创建文档、PPT、Excel、报告 - 深度数据分析、多步骤操作 - 批量文件处理 - 定时自动化任务 - 明确说"交给 Wor...

This skill is essentially a set of instructions for calling a local WorkBuddy queue script — it's coherent with its description but relies on local components you must trust. Before installing or using it: (1) verify python3 and the script exist at ~/.workbuddy/skills/qclaw-workbuddy-bridge/scripts/qclaw_queue.py (the metadata did not declare these requirements); (2) confirm what WorkBuddy does with files and data (where results are stored, whether it uploads data externally); (3) avoid providing sensitive file paths unless you trust WorkBuddy's handling/policies; (4) if you don't have WorkBuddy installed, nothing in this skill will install it — treat it as a client-side integration and ensure the expected local tooling is present and secure.

Type: OpenClaw Skill Name: qclaw-task-submitter Version: 1.2.0 The skill acts as a bridge to delegate complex tasks to a local 'WorkBuddy' service by executing a Python script (`qclaw_queue.py`). While the functionality aligns with the stated purpose, the instructions in `SKILL.md` present a significant command injection vulnerability by directing the AI agent to pass raw, unvalidated user input directly into shell commands. No evidence of intentional malice or data exfiltration was found, but the execution pattern is inherently risky.