← 返回 Skills 市场
Task
作者
amirbrooks
· GitHub ↗
· v0.1.0
6843
总下载
0
收藏
44
当前安装
1
版本数
在 OpenClaw 中安装
/install task
功能描述
Tasker docstore task management via tool-dispatch. Use for task lists, due today/overdue, week planning, add/move/complete, or explicit /task commands.
安全使用建议
Before installing, understand that anything you type after `/task` will be sent unchanged to the `tasker_cmd` tool. Install it if you trust that task tool and want a direct command wrapper; avoid using it for sensitive text unless the downstream tool's handling is acceptable to you.
功能分析
Type: OpenClaw Skill
Name: task
Version: 0.1.0
The skill is classified as suspicious due to the instruction in SKILL.md to "For `/task ...`, pass the args through unchanged" combined with `command-arg-mode: raw`. This creates a direct passthrough of user-provided arguments to the `tasker_cmd` tool. While `command-dispatch: tool` implies a controlled environment, this mechanism presents a significant risk if the `tasker_cmd` tool or the underlying execution environment is vulnerable to argument injection or allows arbitrary command execution, potentially leading to malicious execution initiated by a user. The skill itself does not explicitly instruct the agent to perform malicious actions, but it exposes a high-risk capability.
能力评估
Purpose & Capability
The reported behavior fits a task command skill: `/task ...` forwards the user's task arguments to `tasker_cmd`. The capability is direct, but it is purpose-aligned and tied to a specific tool rather than arbitrary shell execution in the supplied evidence.
Instruction Scope
`command-arg-mode: raw` and the instruction to pass arguments unchanged mean user text is forwarded without skill-level validation. That should be visible to users, but the evidence does not show hidden instructions, prompt injection, exfiltration, or automatic execution beyond the user-invoked command.
Install Mechanism
No artifact evidence was provided of unusual installation steps, package persistence, background workers, or dependency installation beyond the declared command/tool dispatch behavior.
Credentials
The described access is proportionate for a slash-command wrapper because it acts on explicit user input and dispatches to a named task tool. The VirusTotal concern is conditional on a vulnerability in the downstream tool, not evidence that this skill itself bypasses safeguards.
Persistence & Privilege
No supplied artifact evidence indicates credential harvesting, session/profile access, privilege escalation, durable persistence, broad local indexing, or destructive mutation outside the task tool's normal user-directed scope.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install task - 安装完成后，直接呼叫该 Skill 的名称或使用
/task触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of the task skill for natural-language task management.
- Handles task management requests by dispatching commands to Tasker via tool-dispatch.
- Supports natural language to CLI arg translation; passes through explicit /task commands.
- Produces human-friendly, chat-optimized outputs by default (Telegram/WhatsApp compatible).
- Implements logic for parsing multi-part task titles/details/dates when explicit separators are used.
- Supports intuitive mappings for today’s tasks, week planning, adding/completing tasks, and project/task board views.
- Falls back to selector resolution when task references are ambiguous, always hiding machine IDs from output.
元数据
常见问题
Task 是什么？
Tasker docstore task management via tool-dispatch. Use for task lists, due today/overdue, week planning, add/move/complete, or explicit /task commands. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 6843 次。
如何安装 Task？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install task」即可一键安装，无需额外配置。
Task 是免费的吗？
是的，Task 完全免费（开源免费），可自由下载、安装和使用。
Task 支持哪些平台？
Task 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Task？
由 amirbrooks（@amirbrooks）开发并维护，当前版本 v0.1.0。
推荐 Skills