Qclaw Workbuddy Bridge

QClaw 与 WorkBuddy 任务分发集成桥。当用户想要： - 通过微信让 QClaw 发送任务给 WorkBuddy 执行 - QClaw 写任务 → WorkBuddy 执行 → 微信推送结果 - 打通 QClaw（微信入口）和 WorkBuddy（执行引擎） - 远程任务分发、跨客户端任务执行 触发词...

What to check and do before installing: - Fix the path/filename inconsistency: SKILL.md sometimes tells QClaw to run python3 ~/.workbuddy/queue/qclaw_tasks.py, but the shipped script is scripts/qclaw_queue.py under ~/.workbuddy/skills/qclaw-workbuddy-bridge/. Confirm which path will be installed and update all commands to the same, correct path. A mismatched path can cause failed runs or accidental execution of a different script placed in the queue directory. - Review and limit what QClaw will automatically enqueue. The provided prompt encourages automatic queuing for many conditions (including tasks that access local files). Consider restricting automatic enqueuing to explicit user consent, or require a confirmation step before writing tasks that include local file paths or sensitive context. - Restrict file paths and privileges for WorkBuddy execution. Because tasks may include local paths, ensure WorkBuddy runs in a sandbox, or add validation to prevent reading sensitive system files. Use least privilege for any automations that process queue entries. - Protect the queue directory: set tight filesystem permissions (owner-only) and monitor/validate files placed in ~/.workbuddy/queue. Because some doc commands reference executing scripts under ~/.workbuddy/queue, ensure no untrusted files can be executed from that location. - Test in a safe environment first: run the scripts locally on a non-production account to validate behavior (add/list/poll/done) and confirm triggers and file writes behave as expected. - If you need higher assurance, request the author to (a) correct documentation inconsistencies, (b) include optional safeguards (confirmation prompts, path whitelists), and (c) sign or package the script in a predictable install location so QClaw/WorkBuddy run the intended code.

Type: OpenClaw Skill Name: qclaw-workbuddy-bridge Version: 1.2.0 The skill bundle implements a task queue bridge between QClaw and WorkBuddy using a local JSON file (~/.workbuddy/queue/qclaw_tasks.json). The Python script (qclaw_queue.py) is a standard CLI utility for managing task states (add, list, poll, done), and the SKILL.md instructions correctly define the agent's role in dispatching complex tasks to the execution engine without any evidence of malicious intent, data exfiltration, or unauthorized system access.