Pilot Task Template

Reusable task templates with placeholder substitution. Use this skill when: 1. You need to define common task patterns for reuse 2. You want parameterized ta...

This skill appears to do what it says (create templates and submit tasks via pilotctl), but before installing or using it you should: 1) Inspect any templates you plan to use — if a template contains placeholders that match secret environment variable names (e.g., PASSWORD, API_KEY), those values will be read from your environment and included in the submitted task. Avoid putting secrets in environment variables or remove sensitive placeholders from templates. 2) Note that SKILL.md refers to 'jq' but the skill metadata doesn't list it as a required binary—install and verify jq if you need JSON parsing. 3) Be cautious with untrusted templates: the substitution approach shown is brittle and inconsistent in escaping, so malformed variables can break substitutions or produce unexpected output. 4) Confirm you trust the pilotctl daemon and the target agent/network because instantiated tasks are sent out via 'pilotctl --json task submit'. If you need this functionality but want safer behavior, request that the skill explicitly declare required env vars, perform safe escaping of substitutions, and avoid indirect expansion of arbitrary env names (or provide an API to pass parameter values explicitly rather than reading environment variables).

Type: OpenClaw Skill Name: pilot-task-template Version: 1.0.0 The skill provides a framework for managing and instantiating task templates for the 'pilot-protocol' using Bash and the 'pilotctl' utility. It defines a workflow for substituting placeholders in template files stored in ~/.pilot/templates and submitting the resulting tasks. The code uses standard Bash utilities like sed and jq for string manipulation and JSON parsing, and its behavior is strictly aligned with the stated purpose of task automation without any indicators of malicious intent or data exfiltration.