← 返回 Skills 市场

agent-task-manager

Name: agent-task-manager
Author: kirkraman

作者 KirkRaman · GitHub ↗ · v1.0.2 · MIT-0

cross-platform ⚠ suspicious

102

总下载

当前安装

版本数

在 OpenClaw 中安装

/install kirk-agent-task-manager

功能描述

Manages multi-step, stateful agent workflows with task dependencies, persistent state, error recovery, and external API rate-limit handling using SkillBoss A...

使用说明 (SKILL.md)

name: agent-task-manager name: agent-task-manager description: Manages and orchestrates multi-step, stateful agent workflows; handles task dependencies, persistent state, error recovery, and external rate-limiting. Use for creating new multi-agent systems, improving sequential workflows, or managing time-bound actions. requires.env: [SKILLBOSS_API_KEY]

Agent Task Manager

Overview

This skill provides the structure and primitives for building resilient, complex, and professional multi-agent systems powered by the SkillBoss API Hub. It transforms simple scripts into production-ready workflows, with AI capabilities (LLM reasoning, notification delivery) routed through a single unified endpoint.

Core Capabilities

1. Orchestration and Task State

Capability: Defines tasks with clear inputs, outputs, and dependencies (DAG-like structure).
Execution: Uses molt_task.py to manage state in task_state.json.
Value: Prevents redundant work, allows agents to resume mid-workflow after a session reset.

2. External Rate-Limit Management

Capability: Manages the cooldown and retry logic for externally rate-limited actions (e.g., API posts, web scrapes).
Execution: Uses the scripts/cooldown.sh wrapper to store last-executed timestamps and automatically wait/retry.
Value: Ensures continuous operation without violating API rate limits.

3. Modular Role-Based Agents

Capability: Provides a template structure for specialized roles (e.g., ContractAuditor, FinancialAnalyst).
Execution: Modules are designed to be run independently or sequenced by the Orchestrator. AI reasoning steps call the SkillBoss API Hub (/v1/pilot) for LLM inference and notification delivery.
Value: Enables the creation of focused, expert agents for complex tasks like the MoltFinance-Auditor.

Example Workflow: MoltFinance-Auditor

Task: FinancialAudit
Dependencies:
- Role 1: ContractAuditor (Input: Contract Address, Output: Contract Safety Score)
- Role 2: FinancialAnalyst (Input: Contract Address + Safety Score, Output: Trust Score via SkillBoss API Hub LLM)
External Action: NotificationAgent (Dependent on final Trust Score; delivers alert via SkillBoss API Hub email/SMS; subject to Rate Limit).

API Integration

All AI inference and notification delivery is handled through SkillBoss API Hub:

Endpoint: https://api.skillboss.co/v1/pilot
Auth: Authorization: Bearer $SKILLBOSS_API_KEY
LLM response path: data.result.choices[0].message.content

Resources

scripts/

molt_task.py: Python class for task state management.
orchestrator.py: Workflow execution engine; calls SkillBoss API Hub for AI role execution.
task_parser.py: Converts natural language requests to task structures; uses SkillBoss API Hub LLM as fallback parser.
cooldown.sh: Shell wrapper for managing rate-limited executions.

references/

task_schema.md: JSON schema for defining complex task dependencies.

安全使用建议

This skill appears to implement the advertised orchestration and SkillBoss integration, but there are important inconsistencies to address before installing: - The code and SKILL.md require SKILLBOSS_API_KEY (os.environ["SKILLBOSS_API_KEY"]) but the registry metadata lists no required env vars. Expect to provide a SkillBoss API key; otherwise the scripts will error. - The Python scripts use the requests library but the skill does not declare dependencies. Ensure your environment has Python 3 and the required packages installed (e.g., pip install requests) before running. - The skill will send parsed human requests, workflow definitions, and any task data to api.skillboss.co. Do not provide sensitive secrets or private data in tasks unless you trust SkillBoss and understand the API key's permissions and retention policy. - The skill writes task_state.json and ./agent_task_manager_data/*. If you run it in a shared environment, consider running in an isolated directory or container to avoid leaking task content. - Source and homepage are unknown. If you need higher assurance, request or verify the publisher identity, check for signed releases, or review the included code yourself. If you cannot verify provenance, run in a sandbox and limit the SKILLBOSS_API_KEY scope (rotate/delete the key after testing). Given these mismatches (undeclared env var and undeclared dependency), treat the skill as suspicious until the author or registry metadata is corrected and you confirm the runtime behavior in a safe environment.

功能分析

Type: OpenClaw Skill Name: kirk-agent-task-manager Version: 1.0.2 The skill contains a shell injection vulnerability in `scripts/cooldown.sh` due to the use of `eval` on unsanitized command-line arguments. It also relies heavily on an external third-party API (`api.skillboss.co`) for core LLM reasoning, task parsing, and notification delivery (email/SMS), which involves sending task-related data and the `SKILLBOSS_API_KEY` to an external endpoint. While the functionality aligns with the stated purpose of managing multi-agent workflows and financial monitoring, the combination of high-risk execution patterns and external dependencies warrants caution.

能力标签

requires-sensitive-credentials

能力评估

⚠ Purpose & Capability

The skill's code and SKILL.md consistently call https://api.skillboss.co/v1/pilot using an environment variable SKILLBOSS_API_KEY, which is coherent with the stated purpose (SkillBoss-backed orchestration). However, the registry metadata lists no required env vars or dependencies; that's inconsistent and misleading (the skill will fail or raise KeyError without SKILLBOSS_API_KEY).

⚠ Instruction Scope

SKILL.md and the Python scripts instruct the agent to call the SkillBoss API for parsing, LLM inference, and notifications, and to read/write local state files (task_state.json, agent_task_manager_data/*). That scope matches the description, but the instructions access an environment secret (SKILLBOSS_API_KEY) that the registry did not declare — the instructions therefore reference runtime secrets not advertised in metadata.

✓ Install Mechanism

No install spec (instruction-only install). All code is included in the skill bundle; no external downloads or extract steps are specified. This is low-install-risk, but it does mean the included Python scripts will run as-is in the agent environment.

⚠ Credentials

The only credential used is SKILLBOSS_API_KEY (appropriate for the SkillBoss integration). However: (1) the registry metadata did not declare this required env var, (2) the code will transmit task contents and any parsed user inputs to SkillBoss, which may include sensitive data, and (3) Python dependency 'requests' is used but not declared in metadata. These omissions reduce transparency and raise the chance of accidental secret exposure or runtime failure.

ℹ Persistence & Privilege

The skill persists state locally (task_state.json) and creates a timestamp directory ./agent_task_manager_data for cooldowns. It does not request always:true or system-wide config changes and does not modify other skills. This local persistence is proportional to its purpose but operators should be aware that files are created in the working directory and may contain task data.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install kirk-agent-task-manager
安装完成后，直接呼叫该 Skill 的名称或使用 /kirk-agent-task-manager 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.2

- Updated SkillBoss API Hub endpoint from api.heybossai.com to api.skillboss.co in documentation and scripts. - Improved documentation in SKILL.md for accuracy and consistency with API usage. - Minor refinements in orchestrator.py and task_parser.py to align with new API endpoint.

v1.0.0

- Initial release of Agent Task Manager skill. - Provides orchestration and state management for multi-step agent workflows, supporting DAG-like task dependencies and resilient recovery. - Integrated management of external rate-limits with automatic cooldowns and retries. - Modular agent structure with templates for specialized roles (such as ContractAuditor, FinancialAnalyst). - Centralized AI reasoning and notification delivery routed via the SkillBoss API Hub. - Includes scripts for task state tracking, workflow orchestration, task parsing, and rate-limit handling.

元数据

Slug kirk-agent-task-manager

版本 1.0.2

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题