← 返回 Skills 市场
15008
总下载
12
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install mission-control
功能描述
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con...
安全使用建议
Review this before installing. Use it only with a private, trusted-user repository and a tightly restricted agent environment. Prefer fine-grained, single-repository GitHub tokens over classic repo-scope PATs, avoid storing gateway tokens in the browser, require signed webhooks with a configured secret, and do not expose the gateway or CORS proxy publicly without additional authentication and origin restrictions.
功能分析
Type: OpenClaw Skill
Name: mission-control
Version: 2.3.1
The skill bundle is classified as suspicious due to multiple critical vulnerabilities. The `scripts/mc-update.sh` contains a shell injection vulnerability where insufficient input sanitization allows arbitrary command execution via crafted task IDs in `git commit` messages. The `assets/index.html` dashboard is vulnerable to DOM-based XSS through `javascript:` URLs in task descriptions and comments, as the `renderMarkdown` function does not properly sanitize `href` attributes. Furthermore, user-controlled task content (title, description, comments) is used to construct prompts for the AI agent via `assets/transforms/github-mission-control.mjs` (webhook transform) and `assets/index.html` (cron creation), posing a significant prompt injection risk. An additional vulnerability is the open CORS proxy in `scripts/cors-proxy.js`, which could be abused if exposed publicly.
能力评估
Credentials
The skill needs repository read/write access and local gateway access for its automation model, but it asks users for classic GitHub PATs with repo scope, stores GitHub and gateway bearer tokens in browser localStorage, and provides an unrestricted CORS proxy bound to 0.0.0.0.
Install Mechanism
Setup expects copying a transform into ~/.clawdbot/hooks-transforms, creating ~/.clawdbot/mission-control.json, setting up GitHub webhooks, and exposing a local gateway through Tailscale Funnel. The prerequisite docs also include direct remote installer execution with curl piped to sh.
Instruction Scope
Task descriptions, subtasks, comments, and definitions of done are intentionally converted into imperative agent work orders. That is purpose-aligned, but the transform does not require per-task human approval and its HMAC logic skips validation when no signature is supplied or the secret file is missing.
Persistence & Privilege
The skill installs persistent local configuration and a webhook transform, writes task snapshots and debug logs in the workspace, stores browser credentials across sessions, and documents Tailscale Funnel as surviving reboots if Tailscale is running.
Purpose & Capability
The core purpose, a Kanban dashboard that wakes an agent for tasks moved to In Progress, is disclosed and coherent. However, the artifact also includes live cron/gateway execution and editing, Slack posting, repository writes, and collaborator reads, which expand the authority beyond a simple task board.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mission-control - 安装完成后，直接呼叫该 Skill 的名称或使用
/mission-control触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.3.1
Fix: Renamed from 'Jeannie Control' to 'Mission Control'. Removed private cron data from demo crons.json. Clean demo data only.
v2.3.0
Add OpenClaw Gateway /tools/invoke integration: gatewayInvoke(), Gateway Token UI, cron API migration, loadCronsFromGateway()
v2.2.2
Security: User data (tasks.json, crons.json) excluded from git tracking. Demo templates added. Branch protection enabled on public repo.
v2.2.1
Security hardening: input sanitization in mc-update.sh, Security docs in SKILL.md/README.md. Features: Version Update Banner, Processing Timer with timeout warning.
v2.0.0
Initial ClawdHub release: Kanban dashboard for AI assistants with GitHub Pages hosting, webhook automation, and CLI tools
元数据
常见问题
Mission Control 是什么？
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 15008 次。
如何安装 Mission Control？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mission-control」即可一键安装，无需额外配置。
Mission Control 是免费的吗？
是的，Mission Control 完全免费（开源免费），可自由下载、安装和使用。
Mission Control 支持哪些平台？
Mission Control 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mission Control？
由 rdsthomas（@rdsthomas）开发并维护，当前版本 v2.3.1。
推荐 Skills