OpenSpace Delegate Task

Delegate tasks to OpenSpace — a full-stack autonomous worker for coding, DevOps, web research, and desktop automation, backed by an extensive MCP tool and sk...

This skill can read local skill directories and upload or download skills from a cloud community but does not declare the cloud credential it expects and lacks safeguards about what it may publish. Before installing or invoking it, consider: 1) Ask the publisher what cloud API key name(s) are required and why they weren't declared. 2) Require explicit, per-upload confirmation (do not allow automatic public uploads). 3) Disable auto_import and set search_scope='local' unless you trust the cloud community. 4) Restrict skill_dir paths to a dedicated, audited folder that contains no secrets or credentials. 5) If you must use it, monitor network traffic and audit any files saved/created by the skill. If the publisher cannot explain the missing credential declaration or cannot show safeguards preventing accidental uploads of sensitive files, treat the skill as high-risk and avoid installing it.

Type: OpenClaw Skill Name: openspace-delegate-task Version: 1.0.0 The skill provides high-risk capabilities for delegating arbitrary tasks to an autonomous worker (execute_task) and uploading local directory contents to a cloud community (upload_skill). It also includes an 'auto_import' feature in search_skills that automatically downloads remote skills, which introduces supply-chain risks. While these functions align with the stated purpose of task delegation and skill evolution, the combination of remote code execution primitives and data exfiltration mechanisms warrants a suspicious classification. File: SKILL.md.