Opentask Skill

OpenTask 分布式任务管理系统。查询和管理 OpenClaw 容器的任务。使用场景：(1) 查询待执行任务、获取任务列表、任务详情；(2) 创建任务、开始执行、完成任务、标记失败、重试、取消；(3) 查看今日统计、任务日志；(4) HEARTBEAT 集成任务检查。触发短语:"查询任务"、"获取任务"、"创...

Key points to consider before installing: - Metadata mismatch: The skill requires OPENTASK_API_KEY and OPENTASK_HOST to function, but the package metadata does not declare these required environment variables. Ask the publisher to update the registry metadata so required secrets are visible before you install. - Trust the API host: The skill will send data and task updates to whatever you set as OPENTASK_HOST. Only point it at an internal/trusted service. Prefer an HTTPS endpoint and validate TLS to avoid leaking keys. - Minimize API key scope: Create a dedicated API key with least privilege for this agent (limit actions, IPs, or lifetime if possible). Do not reuse broad credentials. - Local file access: The instructions recommend reading ~/.openclaw/.env, openclaw.json, container hostname, or HEARTBEAT.md to determine the instance id. Ensure those files do not contain unrelated secrets you wouldn't want consumed by the skill. - Autonomous runs: The skill can be invoked autonomously by default. If you do not want the agent to call the OpenTask API without a human in the loop, restrict autonomous invocation or monitor runs. - Source verification: There is no homepage or publisher info. If you plan to use this in production, request provenance (source repo, maintainer contact, changelog). Consider code review of the real OpenTask server and network monitoring during initial use. What would increase confidence: registry metadata that declares OPENTASK_API_KEY and OPENTASK_HOST, publisher/contact info or a public repo, and confirmation that the skill will not read other sensitive files beyond the listed OpenClaw config paths.

Type: OpenClaw Skill Name: opentask-client Version: 1.4.0 The opentask-client skill is a legitimate task management interface designed for OpenClaw agents to coordinate distributed tasks. It uses standard environment variables (OPENTASK_API_KEY, OPENTASK_HOST) and curl commands to interact with a REST API for querying, creating, and updating task statuses. The logic in SKILL.md and references/api.md is transparent, lacks any obfuscation, and contains no indicators of data exfiltration, unauthorized execution, or malicious prompt injection.