← 返回 Skills 市场
wewehg

TESP

作者 wewehg · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
100
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install tesp
功能描述
Enforce the Task Execution Signal Protocol for non-instant work so execution stays visible, staged, versioned, and auditable. Use when a task will take more...
安全使用建议
This skill appears to be what it says (a protocol to make long tasks visible) and doesn't request credentials or install anything — that's good. However, it hard-codes a user-specific file path (/Users/weweclaw/.openclaw/workspace/...) and claims a daily audit cron exists even though no install or code is included. Before installing or invoking it: 1) confirm or change the task-board path to a location you control (or require explicit permission to read/write); 2) ask the skill author to remove hard-coded usernames and to make any cron/scheduling opt-in with clear install steps; 3) test in an isolated workspace so you can see what files the agent creates/updates; and 4) if you don't want the agent touching your filesystem, do not grant it file access or adjust the protocol to use ephemeral or explicit user-provided storage. These inconsistencies are not proof of malicious intent but are enough to warrant caution.
功能分析
Type: OpenClaw Skill Name: tesp Version: 1.0.3 The 'tesp' skill implements the Task Execution Signal Protocol (TESP), a structured framework for managing and reporting the progress of long-running tasks. It uses local markdown files (TASK_QUEUE.md and TASK_ARCHIVE.md) within the OpenClaw workspace to maintain state and provides templates for status updates, ensuring transparency and auditability without any signs of malicious intent, data exfiltration, or unauthorized execution.
能力评估
Purpose & Capability
The name/description match the instructions' intent (govern execution visibility and staging) and the skill requires no credentials or installs, which is proportionate. However, the protocol explicitly names a user-specific config path (/Users/weweclaw/.openclaw/workspace/TASK_QUEUE.md and TASK_ARCHIVE.md) even though the skill declares no required config paths — this is an inconsistency that could cause the agent to read/write arbitrary files in the user's home.
Instruction Scope
SKILL.md and references instruct the agent to create/update local task board files, enforce cadence, and rely on an 'existing audit cron' in the source workspace. Because this is an instruction-only skill, these are the exact runtime actions the agent will take: touching local files and looking for system-scheduled jobs. The skill does not declare or ask for permission for these filesystem or scheduling actions, and the hard-coded absolute path contains a specific username, which is unexpected and potentially intrusive.
Install Mechanism
No install spec and no code files — lowest-risk delivery model. Nothing will be written to disk by an installer; runtime behavior is entirely driven by the instruction text.
Credentials
The skill declares no environment variables or credentials (appropriate for its stated purpose), but the instructions reference configuration paths and an existing 'light audit' cron that imply access to persistent workspace artifacts. Because these paths/configs are not declared in the metadata, there is a mismatch between declared and actual required local resources.
Persistence & Privilege
always:false and no autonomous-permission escalation are fine. But the skill's text implies there is a pre-existing daily audit cron in a 'source workspace' (tesp:light-audit). Since no code or install creates that cron, the statement is misleading — it may prompt the agent to search system cron entries or try to create one without explicit install instructions.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tesp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tesp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
Add stronger Chinese introduction and refined release description for TESP.
v1.0.2
- Clarified and expanded TESP protocol documentation in SKILL.md. - Added concise description in both English and Chinese. - Defined typical use cases and triggering scenarios for TESP. - Detailed the step-by-step core operating sequence for enforcing TESP. - Outlined minimum requirements and special rules for multi-agent workflows. - Provided guidance on model selection for governance and audits. - Included direct links to reference protocol and template files for further reading.
元数据
Slug tesp
版本 1.0.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

TESP 是什么?

Enforce the Task Execution Signal Protocol for non-instant work so execution stays visible, staged, versioned, and auditable. Use when a task will take more... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 100 次。

如何安装 TESP?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tesp」即可一键安装,无需额外配置。

TESP 是免费的吗?

是的,TESP 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

TESP 支持哪些平台?

TESP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 TESP?

由 wewehg(@wewehg)开发并维护,当前版本 v1.0.3。

💬 留言讨论