Manus AI Skill for OpenClaw

Agente de IA autónomo de Manus con capacidades de investigación, desarrollo, automatización y generación de medios.

This skill appears to do what it says: it forwards prompts, files, and webhook registrations to Manus using MANUS_API_KEY. Before installing: 1) Only provide a Manus API key you trust — the key allows creation of tasks, use of connectors, and may consume credits. 2) Do not upload sensitive files unless you understand Manus's data handling and retention policies. 3) If you plan to register webhooks, ensure the webhook URL you supply is secure (HTTPS, authenticated) and does not expose internal services. 4) Consider testing with a limited/sandbox Manus account and monitor credit usage. 5) If you need on-device-only functionality, note this skill sends data off-box; it does not implement local Gmail/Notion OAuth flows (those are expected to be handled by Manus).

Type: OpenClaw Skill Name: openclaw-skill-manus Version: 0.1.0 The skill is classified as suspicious due to the inclusion of a `webhook_server.py` script that opens a network port (default 8080) on the host system. While this is for a stated purpose (receiving task notifications), opening a port is a high-risk capability that could expose the host to network-based attacks or be misused. Additionally, the `upload_file.py` script allows the agent to upload arbitrary local files to the Manus API, which, if prompted maliciously, could lead to sensitive data exposure. These capabilities, though plausible for an autonomous agent, introduce elevated risks without clear malicious intent in their current implementation.