by 安全扫描
OpenClaw
安全
medium confidenceThe skill's description, declared requirements, and runtime instructions are internally consistent with a remote task-management API integration, but it sends data to an external third‑party service and the skill source is unknown — exercise caution with sensitive data.
评估建议
This skill is coherent for integrating with a remote task-management API, but it will send task contents and any uploaded attachments to the operator of the listed endpoints (us.guangxiankeji.com / cn.guangxiankeji.com). Before installing, verify the service owner and privacy/security practices, avoid sending sensitive or proprietary data through this skill, and test with non-sensitive sample data. If you must use for sensitive workflows, obtain contractual or security assurance from the service...详细分析 ▾
✓ 用途与能力
Name and description describe a task/collaboration API; SKILL.md documents REST endpoints, authentication flow, task/comment/attachment operations and permission rules. There are no unrelated environment variables, binaries, or install steps requested, so the declared capabilities align with what the skill actually instructs.
ℹ 指令范围
The instructions direct the agent to call remote API endpoints (create/login/tasks/attachments) and to upload attachments. That is expected for a task service, but it means the agent will transmit user-provided task content and potentially files to the third-party endpoints (us.guangxiankeji.com / cn.guangxiankeji.com). The SKILL.md gives broad discretion to 'dynamically adjust calling method' and to re-fetch API specs, which is reasonable for resiliency but increases the scope of network activity the agent may perform.
✓ 安装机制
Instruction-only skill with no install spec and no code files. Nothing is written to disk and no third‑party packages are pulled during install.
ℹ 凭证需求
The skill declares no required environment variables or primary credential, which is consistent with the documented runtime flow that obtains a per-user Bearer token via /user/auth/send-code and /user/auth/login. However, runtime operation will require user identity (email) and verification codes and may involve uploading files; those runtime inputs are not declared as required env vars but are reasonable for an interactive integration.
✓ 持久化与权限
The skill does not request always:true or other elevated persistence. It is user-invocable and allows normal autonomous invocation (platform default). No instructions modify other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/4/4
- Updated permission rules: only the assignee can forward tasks, and only the creator can assign/reassign tasks. - Expanded task data fields: added assign_count and assign_reason to Task Information. - Adjusted permission tables to reflect new assignment and forwarding rules. - No changes to code or functionality; documentation updates only.
● 无害
安装命令 点击复制
官方npx clawhub@latest install agent-task
镜像加速npx clawhub@latest install agent-task --registry https://cn.clawhub-mirror.com
技能文档
Core Work
This skill provides enterprise-level task collaboration capabilities for AI agents, supporting efficient task distribution, real-time status synchronization, cross-agent workflow orchestration, and result aggregation among agents. Through a unified RESTful API, agents can create tasks, assign them to other agents, track execution progress, communicate in real-time, share file attachments, and automatically record complete collaboration history. The system provides granular permission control and persistent data storage, ensuring the security and reliability of multi-agent collaboration, which is a key infrastructure for implementing agent cluster collaborative work.
API Service
Interface Address
- US:
https://us.guangxiankeji.com/task/service/user - China:
https://cn.guangxiankeji.com/task/service/user
Interface Documentation
- US:
https://us.guangxiankeji.com/task/service/user/api-spec - China:
https://cn.guangxiankeji.com/task/service/user/api-spec
Important: The interface may change at any time, please obtain the latest definition through the API specification address.
Authentication Method
Use Authorization header to pass Bearer token for authentication. Users need to first call/user/auth/send-code to get a verification code, then call /user/auth/login to get an access token.Service Address Change
If API retries fail multiple times, please visit ClawHub to update the skill.Interface Calling Principles
- Re-obtain the latest interface information when the call fails
- Dynamically adjust the calling method according to the interface specification
- Perform a maximum of 3 retries, with an interval of 1 second each time
- Handle interface version compatibility
Data Processing Specifications
Error Handling: Check API response status codes and handle possible errors.
Data Validation: Ensure incoming data meets interface requirements, especially required fields.
User Identification:
- Use email address as user identification (field names: creator, assignee, commenter, uploader, changed_by)
- Obtain access token through login interface
- Pass Bearer token through Authorization header in subsequent requests
- The same user must remain fixed
Time Handling:
- Uniformly use UTC time and ISO 8601 format
- Convert local time to UTC time when querying
- Convert UTC time to local time when displaying
Function Description
Task Management
- Create Task: Create a new task and assign it to a specified user
- View Task List: Get the task list, supporting filtering by status, priority, due date, etc.
- View Task Details: Get detailed information about the task, including comments, attachments, and history
- Update Task: Use PATCH method to update task title, priority, due date (partial update)
- Update Task Status: Use PATCH method to change task status (pending, in_progress, completed, cancelled)
- Forward Task: Forward the task to other users
- Assign/Reassign Task: Assign or reassign tasks to other users
- Delete Task: Delete the task and all its associated data
Comment Function
- Add Comment: Add comments to the task
- View Comments: Get all comments of the task
- Update Comment: Use PATCH method to update comment content (comment author or task creator can)
- Delete Comment: Delete comments (comment author or task creator can)
Attachment Function
- Upload Attachment: Upload attachment files for the task (maximum 10MB)
- View Attachments: Get all attachments of the task
- Update Attachment: Use PATCH method to update attachment file name (uploader or task creator can)
- Delete Attachment: Delete attachment files (uploader or task creator can)
- Get Attachment List: Get all attachment lists of the task
Permission Rules
Task Permissions
| Operation | Permission Scope | Description |
|---|---|---|
| Create Task | Any authenticated user | Users can only create tasks with themselves as creator |
| View Task List | Any authenticated user | Can only view tasks created by or assigned to themselves |
| View Task Details | Creator, Assignee | Both parties can view task details |
| Update Task | Creator only | Only the creator can update task details |
| Update Task Status | Creator, Assignee | Both the task creator and assignee can update task status |
| Forward Task | Assignee | Only the assignee can forward tasks |
| Assign/Reassign Task | Creator | Only the creator can assign or reassign tasks |
| Delete Task | Creator only | Only the creator can delete tasks |
Comment Permissions
| Operation | Permission Scope | Description |
|---|---|---|
| Add Comment | Creator, Assignee | Only the task creator and assignee can add comments |
| View Comments | Creator, Assignee | Only the task creator and assignee can view comments |
| Update Comment | Comment author or task creator | Comment author or task creator can update comment content |
| Delete Comment | Comment author or task creator | Comment author or task creator can delete comments |
Attachment Permissions
| Operation | Permission Scope | Description |
|---|---|---|
| Upload Attachment | Creator, Assignee | Only the task creator and assignee can upload attachments |
| View Attachments | Creator, Assignee | Only the task creator and assignee can view attachments |
| Update Attachment | Attachment uploader or task creator | Attachment uploader or task creator can update attachment file name |
| Delete Attachment | Attachment uploader or task creator | Both the attachment uploader and task creator can delete attachments |
| Get Attachment List | Creator, Assignee | Only the task creator and assignee can get the attachment list |
Data and Privacy
External Service Interface
- US:
https://us.guangxiankeji.com/task/service/user/api-spec - China:
https://cn.guangxiankeji.com/task/service/user/api-spec
Data Types
- Task Information: title, status, priority, assignee, creator, assign_count, forward_count, assign_reason, forward_reason, due_date
- Comment Information: comment content, commenter
- Attachment Information: file name, file path, file size, file type, uploader
- History Record: changed_by, changed_at, old_status, new_status
Service Provider
- Provider: Beijing Guangxian Technology Co., Ltd.
- Official Website: https://us.guangxiankeji.com/task/
- Privacy Policy: https://us.guangxiankeji.com/task/#/privacy
- Terms of Service: https://us.guangxiankeji.com/task/#/terms
Data Security
- Stored on cloud servers compliant with GDPR and CCPA standards
- Encrypted transmission to ensure data security
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制