task-progress-stream

Stream long-running task progress into the OpenClaw chat UI.

This skill appears to do what it says, but exercise caution before running it: - Review the included script (you already have the source) before use. - The script runs arbitrary shell commands (--cmd) and tails files; only point it at commands/logs you trust and control. - It calls the 'openclaw' CLI to inject messages into chat; ensure you understand what credentials/config that CLI will use and that you trust the destination chat session. - Logs and stdout/stderr may contain secrets (API keys, tokens, PII); sanitize logs or restrict what is tailed to avoid accidental exfiltration. - Note the registry metadata omitted the dependency on the 'openclaw' binary; ensure the binary path and behavior are acceptable in your environment. - Prefer running this in an isolated environment or with minimal privileges; consider using an explicit out-dir in a controlled location and cleaning up produced files after use. If you need higher confidence, request the full untruncated source, confirm any CLI dependencies, and test in a safe sandbox first.

Type: OpenClaw Skill Name: task-progress-stream Version: 0.1.0 The skill provides a utility to monitor long-running tasks by executing arbitrary shell commands via `spawn` with `/bin/bash -lc` in `scripts/task_progress_stream.js`. While this capability is aligned with the stated purpose of streaming progress updates to the OpenClaw UI, the execution of unsanitized command strings represents a high-risk behavior. No evidence of intentional malice, such as data exfiltration or unauthorized persistence, was found in the code or the `SKILL.md` instructions.