← Back to Skills Marketplace
15008
Downloads
12
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install mission-control
Description
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con...
Usage Guidance
Review this before installing. Use it only with a private, trusted-user repository and a tightly restricted agent environment. Prefer fine-grained, single-repository GitHub tokens over classic repo-scope PATs, avoid storing gateway tokens in the browser, require signed webhooks with a configured secret, and do not expose the gateway or CORS proxy publicly without additional authentication and origin restrictions.
Capability Analysis
Type: OpenClaw Skill
Name: mission-control
Version: 2.3.1
The skill bundle is classified as suspicious due to multiple critical vulnerabilities. The `scripts/mc-update.sh` contains a shell injection vulnerability where insufficient input sanitization allows arbitrary command execution via crafted task IDs in `git commit` messages. The `assets/index.html` dashboard is vulnerable to DOM-based XSS through `javascript:` URLs in task descriptions and comments, as the `renderMarkdown` function does not properly sanitize `href` attributes. Furthermore, user-controlled task content (title, description, comments) is used to construct prompts for the AI agent via `assets/transforms/github-mission-control.mjs` (webhook transform) and `assets/index.html` (cron creation), posing a significant prompt injection risk. An additional vulnerability is the open CORS proxy in `scripts/cors-proxy.js`, which could be abused if exposed publicly.
Capability Assessment
Credentials
The skill needs repository read/write access and local gateway access for its automation model, but it asks users for classic GitHub PATs with repo scope, stores GitHub and gateway bearer tokens in browser localStorage, and provides an unrestricted CORS proxy bound to 0.0.0.0.
Install Mechanism
Setup expects copying a transform into ~/.clawdbot/hooks-transforms, creating ~/.clawdbot/mission-control.json, setting up GitHub webhooks, and exposing a local gateway through Tailscale Funnel. The prerequisite docs also include direct remote installer execution with curl piped to sh.
Instruction Scope
Task descriptions, subtasks, comments, and definitions of done are intentionally converted into imperative agent work orders. That is purpose-aligned, but the transform does not require per-task human approval and its HMAC logic skips validation when no signature is supplied or the secret file is missing.
Persistence & Privilege
The skill installs persistent local configuration and a webhook transform, writes task snapshots and debug logs in the workspace, stores browser credentials across sessions, and documents Tailscale Funnel as surviving reboots if Tailscale is running.
Purpose & Capability
The core purpose, a Kanban dashboard that wakes an agent for tasks moved to In Progress, is disclosed and coherent. However, the artifact also includes live cron/gateway execution and editing, Slack posting, repository writes, and collaborator reads, which expand the authority beyond a simple task board.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mission-control - After installation, invoke the skill by name or use
/mission-control - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.3.1
Fix: Renamed from 'Jeannie Control' to 'Mission Control'. Removed private cron data from demo crons.json. Clean demo data only.
v2.3.0
Add OpenClaw Gateway /tools/invoke integration: gatewayInvoke(), Gateway Token UI, cron API migration, loadCronsFromGateway()
v2.2.2
Security: User data (tasks.json, crons.json) excluded from git tracking. Demo templates added. Branch protection enabled on public repo.
v2.2.1
Security hardening: input sanitization in mc-update.sh, Security docs in SKILL.md/README.md. Features: Version Update Banner, Processing Timer with timeout warning.
v2.0.0
Initial ClawdHub release: Kanban dashboard for AI assistants with GitHub Pages hosting, webhook automation, and CLI tools
Metadata
Frequently Asked Questions
What is Mission Control?
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con... It is an AI Agent Skill for Claude Code / OpenClaw, with 15008 downloads so far.
How do I install Mission Control?
Run "/install mission-control" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mission Control free?
Yes, Mission Control is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Mission Control support?
Mission Control is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mission Control?
It is built and maintained by rdsthomas (@rdsthomas); the current version is v2.3.1.
More Skills