← 返回 Skills 市场
14631
总下载
12
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install mission-control
功能描述
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con...
安全使用建议
Install only if you want a GitHub-backed, webhook-driven automation system, not just a local kanban board. Use a dedicated least-privilege GitHub token, avoid shared browser profiles, configure a real webhook secret, restrict dashboard and repository access, avoid exposing the CORS proxy publicly, and review every setup step before allowing it to push code, enable Funnel, or wake an agent automatically.
功能分析
Type: OpenClaw Skill
Name: mission-control
Version: 2.3.1
The skill bundle is classified as suspicious due to multiple critical vulnerabilities. The `scripts/mc-update.sh` contains a shell injection vulnerability where insufficient input sanitization allows arbitrary command execution via crafted task IDs in `git commit` messages. The `assets/index.html` dashboard is vulnerable to DOM-based XSS through `javascript:` URLs in task descriptions and comments, as the `renderMarkdown` function does not properly sanitize `href` attributes. Furthermore, user-controlled task content (title, description, comments) is used to construct prompts for the AI agent via `assets/transforms/github-mission-control.mjs` (webhook transform) and `assets/index.html` (cron creation), posing a significant prompt injection risk. An additional vulnerability is the open CORS proxy in `scripts/cors-proxy.js`, which could be abused if exposed publicly.
能力评估
Purpose & Capability
The core task-board and agent work-order flow is coherent with the stated purpose, but the bundle also includes operational cron management, repository writes, collaborator enumeration, Slack notifications, and gateway control that materially exceed a simple kanban dashboard.
Instruction Scope
The docs disclose many advanced behaviors, but they frame setup as automatic and make conflicting security claims, including saying the dashboard stores no tokens while the HTML stores GitHub and gateway tokens in localStorage.
Install Mechanism
Setup instructions include copying files, creating ~/.clawdbot config, installing a persistent webhook transform, configuring GitHub webhooks, enabling Tailscale Funnel, pushing to GitHub, and enabling Pages. These are user-directed, but high-impact and not strongly gated by explicit consent boundaries.
Credentials
The skill uses GitHub repo-scope PATs, local gh CLI token files, gateway bearer tokens, optional Slack tokens, outbound GitHub/Slack/gateway calls, and public tunnel guidance. This can be proportionate for full automation, but it is broad and under-scoped for users expecting only local task tracking.
Persistence & Privilege
The webhook transform can persist under ~/.clawdbot/hooks-transforms and wake the agent on future GitHub events; HMAC verification fails open when no secret file exists, and the CORS proxy binds to 0.0.0.0 with wildcard CORS.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mission-control - 安装完成后，直接呼叫该 Skill 的名称或使用
/mission-control触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.3.1
Fix: Renamed from 'Jeannie Control' to 'Mission Control'. Removed private cron data from demo crons.json. Clean demo data only.
v2.3.0
Add OpenClaw Gateway /tools/invoke integration: gatewayInvoke(), Gateway Token UI, cron API migration, loadCronsFromGateway()
v2.2.2
Security: User data (tasks.json, crons.json) excluded from git tracking. Demo templates added. Branch protection enabled on public repo.
v2.2.1
Security hardening: input sanitization in mc-update.sh, Security docs in SKILL.md/README.md. Features: Version Update Banner, Processing Timer with timeout warning.
v2.0.0
Initial ClawdHub release: Kanban dashboard for AI assistants with GitHub Pages hosting, webhook automation, and CLI tools
元数据
常见问题
Mission Control 是什么？
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 14631 次。
如何安装 Mission Control？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mission-control」即可一键安装，无需额外配置。
Mission Control 是免费的吗？
是的，Mission Control 完全免费（开源免费），可自由下载、安装和使用。
Mission Control 支持哪些平台？
Mission Control 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mission Control？
由 rdsthomas（@rdsthomas）开发并维护，当前版本 v2.3.1。
推荐 Skills