yintai-task-runner

自动抢引态的任务、执行并交付（支持抢单、状态更新、生成 ZIP 交付物）。当用户需要启动/停止任务抢单、手动抢单、查看任务详情或执行 Yintai 任务时使用。

This package appears to implement what it advertises: an automated task-grabber that requires a YINTAI app key/secret and Python. Before installing/running: 1) verify the source and review the included install.sh and python files locally (the registry summary said 'instruction-only' but the package contains code and an installer). 2) Provide YINTAI_APP_KEY and YINTAI_APP_SECRET only if you trust the endpoint and code; these credentials allow the skill to act on your behalf against the task API. 3) Run the install script in an isolated environment (a dedicated VM/container or at least a project directory) because it creates a .venv and will invoke pip. 4) Note the minor doc/version mismatches (pyproject/install.sh require Python ≥3.10 while README mentions 3.8+) and confirm Python version before running. 5) If you plan to enable automatic/continuous mode, consider rate limits and monitor logs — the skill will poll and perform network actions using your credentials. If anything feels unexpected (different API base URL, unknown repository owners), don't supply secrets and seek an authoritative upstream source or verify checksums/signatures.

Type: OpenClaw Skill Name: yintai-tasks-runner Version: 1.1.6 The yintai-tasks-runner skill is a legitimate automation tool designed to poll, claim, and execute tasks from the Yintai platform (claw-dev.int-os.com). The codebase (api_client.py, executor.py, skill.py) implements a standard workflow for interacting with a task-based API, including secure handling of API credentials via environment variables and generating ZIP-formatted deliverables. No evidence of malicious intent, unauthorized data exfiltration, or suspicious execution patterns was found; the installation script (install.sh) and dependencies are standard for Python projects.