← 返回 Skills 市场
354
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install yinan-task-automator
功能描述
Automate repetitive computer tasks including file operations, data processing, web scraping, and API integrations. Use when you need to batch process files,...
安全使用建议
Proceed cautiously. The package appears incomplete: SKILL.md references several scripts and a base_task that are not included, and API/e‑commerce features are placeholders. Before running: 1) Inspect the code (especially any scripts that perform file operations) and test with --dry-run on non-critical directories; 2) Don’t provide real API credentials or schedule jobs until you have the missing workflow/scheduler code and have reviewed how secrets are used; 3) Run the tool in a sandbox or VM first to observe behavior; 4) Ask the publisher for the complete source (schedule_task.py, run_workflow.py, convert_data.py, base_task, tasks/ registry) and for clarification on how API keys will be handled. If you need production API/e‑commerce automation, prefer a package that documents required credentials and includes the referenced scripts.
功能分析
Type: OpenClaw Skill
Name: yinan-task-automator
Version: 1.0.0
The skill bundle provides a framework for task automation, including file management and data processing. The `scripts/run_task.py` script contains a path traversal vulnerability in the `task_file_organizer` function, as it joins user-controlled folder names from the configuration file with the destination path without sanitization. Additionally, the script includes placeholders for high-risk capabilities such as API synchronization and web monitoring, which are consistent with the stated purpose but fall under the 'suspicious' classification due to their inherent risk and the lack of input validation.
能力评估
Purpose & Capability
The name/description and the included run_task.py align with file organization and data conversion capabilities. However, the SKILL.md advertises broader features (scheduling, workflows, API sync, e-commerce integrations) that are either placeholders in run_task.py or implemented by scripts referenced in the docs but not included in the bundle (e.g., schedule_task.py, run_workflow.py, convert_data.py, base_task). The examples live under tasks-examples/ while documentation refers to tasks/ which is inconsistent.
Instruction Scope
SKILL.md instructs running several scripts that do not exist in the package (schedule_task.py, run_workflow.py, convert_data.py, etc.). The provided run_task.py performs real file operations (shutil.move) and will move files under the user's home by default, which is expected for a file organizer but can be destructive if misconfigured. The docs also recommend storing API keys in environment variables, yet the code has placeholders for API/web/e‑commerce tasks and does not show how secrets would be used—this mismatch increases risk because users may supply credentials to workflows that are not fully implemented or audited.
Install Mechanism
There is no install specification (instruction-only with one code file). Nothing is downloaded or extracted during install, which minimizes supply-chain risk.
Credentials
The registry declares no required environment variables, but SKILL.md recommends using environment variables/.env for API keys and secrets. For real API or e‑commerce usage the skill will require credentials, but those are not documented as required in the metadata. This disconnect means credentials would be provided ad hoc (not scoped or validated), increasing risk if users supply high‑privilege keys without understanding where/how they are used.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes logs to a local logs/ directory and can create/move files/directories under user paths; that is expected behavior for an automation tool but should be used with caution.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install yinan-task-automator - 安装完成后，直接呼叫该 Skill 的名称或使用
/yinan-task-automator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of Task Automator for OpenClaw.
- Automate file operations, data processing, web scraping, and API integrations.
- Built-in tasks for file organization, data conversion, API sync, web monitoring, and e-commerce order processing.
- Includes tools for scheduling recurring tasks using cron expressions.
- Supports creation of custom tasks and multi-step automation workflows.
- Provides security, troubleshooting, and best practices guidelines.
元数据
常见问题
Task Automator 是什么？
Automate repetitive computer tasks including file operations, data processing, web scraping, and API integrations. Use when you need to batch process files,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 354 次。
如何安装 Task Automator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install yinan-task-automator」即可一键安装，无需额外配置。
Task Automator 是免费的吗？
是的，Task Automator 完全免费（开源免费），可自由下载、安装和使用。
Task Automator 支持哪些平台？
Task Automator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Task Automator？
由 Yinanping（@yinanping-cpu）开发并维护，当前版本 v1.0.0。
推荐 Skills