QuantumOS

Install and manage QuantumOS, an AI command center dashboard for OpenClaw. Use when the user wants to set up QuantumOS, start/stop the dashboard, troubleshoo...

Read before running. Recommendations: - Inspect the GitHub repository (https://github.com/murtiurti4/quantumos.git) yourself before running setup.sh; confirm code matches expectations and review package.json/package-lock for risky dependencies. - Backup HEARTBEAT.md (and any workspace config) before making changes. Do not blindly append the automatic triage block — review and restrict the instructions (remove/limit the "start working on it" automatic behavior) or run triage manually until you trust the setup. - The setup script will try to read your OpenClaw config (~/.openclaw/openclaw.json) to auto-detect gateway.token and will write that token into the project's .env.local; consider entering a scoped/temporary token, or edit .env.local manually instead of letting the script write it. - Run npm install in a controlled environment (or inspect dependencies), and consider running the server in a container or VM first rather than on a host with sensitive data. - Be cautious about allowing any agent automatic task execution that could perform actions on your systems; prefer manual confirmation or tight guardrails. - If you are unsure, mark this skill as 'suspicious' and request the upstream repo source and code review from a trusted developer before installing.

Type: OpenClaw Skill Name: quantumos Version: 0.2.0 The skill is classified as suspicious due to two main reasons: 1) The `scripts/setup.sh` file directly accesses and reads the user's `~/.openclaw/openclaw.json` file to extract the `gateway.token`. While this token is used for local configuration (written to `.env.local`), accessing sensitive credentials directly is a high-risk operation that could be exploited if the dashboard itself were compromised. 2) The `SKILL.md` file contains explicit instructions for the AI agent to perform actions like `GET http://localhost:3005/api/mission-control/tasks` and manage tasks, which constitutes prompt injection. Although the objective appears to be legitimate integration with the skill's functionality, this demonstrates a risky capability to directly control the agent's behavior.