← 返回 Skills 市场
11200
总下载
11
收藏
82
当前安装
5
版本数
在 OpenClaw 中安装
/install mission-control
功能描述
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con...
安全使用建议
Review the credential model before installing: use dedicated least-privilege GitHub tokens, configure a real webhook secret, restrict dashboard/repository access to trusted users, and be comfortable with a persistent webhook that can wake the agent when tasks are moved to In Progress.
功能分析
Type: OpenClaw Skill
Name: mission-control
Version: 2.3.1
The skill bundle is classified as suspicious due to multiple critical vulnerabilities. The `scripts/mc-update.sh` contains a shell injection vulnerability where insufficient input sanitization allows arbitrary command execution via crafted task IDs in `git commit` messages. The `assets/index.html` dashboard is vulnerable to DOM-based XSS through `javascript:` URLs in task descriptions and comments, as the `renderMarkdown` function does not properly sanitize `href` attributes. Furthermore, user-controlled task content (title, description, comments) is used to construct prompts for the AI agent via `assets/transforms/github-mission-control.mjs` (webhook transform) and `assets/index.html` (cron creation), posing a significant prompt injection risk. An additional vulnerability is the open CORS proxy in `scripts/cors-proxy.js`, which could be abused if exposed publicly.
能力评估
Purpose & Capability
The task-board and dashboard behavior is coherent with the stated purpose, including agent execution when tasks move to In Progress, but users should understand that task text becomes executable work orders for the assistant.
Instruction Scope
The skill discloses a single-user/trusted-user trust model and cautions multi-user setups, but its normal workflow still allows dashboard or repository task edits to trigger agent work.
Install Mechanism
There is no install spec, but the documentation instructs the agent to copy files, create configuration, install a webhook transform, configure GitHub webhooks, push to GitHub, and enable GitHub Pages; these are user-directed setup steps but should be reviewed.
Credentials
The artifacts require or use GitHub, gateway, and optional Slack credentials despite registry metadata declaring no credentials, and the documentation/code show broad GitHub token handling including browser localStorage and local gh CLI token-file access.
Persistence & Privilege
The skill installs a persistent webhook transform that can wake the agent, and the HMAC verification code skips validation when the secret file is absent, which weakens the advertised origin-verification model.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mission-control - 安装完成后，直接呼叫该 Skill 的名称或使用
/mission-control触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.3.1
Fix: Renamed from 'Jeannie Control' to 'Mission Control'. Removed private cron data from demo crons.json. Clean demo data only.
v2.3.0
Add OpenClaw Gateway /tools/invoke integration: gatewayInvoke(), Gateway Token UI, cron API migration, loadCronsFromGateway()
v2.2.2
Security: User data (tasks.json, crons.json) excluded from git tracking. Demo templates added. Branch protection enabled on public repo.
v2.2.1
Security hardening: input sanitization in mc-update.sh, Security docs in SKILL.md/README.md. Features: Version Update Banner, Processing Timer with timeout warning.
v2.0.0
Initial ClawdHub release: Kanban dashboard for AI assistants with GitHub Pages hosting, webhook automation, and CLI tools
元数据
常见问题
Mission Control 是什么？
Kanban-style task management dashboard for AI assistants. Manage tasks via CLI or dashboard UI. Use when user mentions tasks, kanban, task board, mission con... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 11200 次。
如何安装 Mission Control？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mission-control」即可一键安装，无需额外配置。
Mission Control 是免费的吗？
是的，Mission Control 完全免费（开源免费），可自由下载、安装和使用。
Mission Control 支持哪些平台？
Mission Control 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mission Control？
由 rdsthomas（@rdsthomas）开发并维护，当前版本 v2.3.1。
推荐 Skills