安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions are coherent with its stated purpose: it creates and manages file-based task folders and invokes the local OpenClaw cron CLI; it does not request unrelated credentials or perform obvious exfiltration.
评估建议
This skill appears to do what it says: create task folders, state files, and cron specs and to call the local 'openclaw' CLI. Before installing or running it, review the included scripts/task_father.py (you already have it) and back up any existing workspace files you care about (it will create/overwrite task files and registry rows). Confirm 'openclaw' is the intended local CLI and that you trust it on your machine. Be cautious with task slugs and with messages passed to cron-add (they end up i...详细分析 ▾
✓ 用途与能力
Name/description match the included script and SKILL.md. The Python script creates task folders, registry rows, queue files, and cron spec files and calls the local 'openclaw cron' CLI as described — these requirements are proportionate to a file-based task state machine generator.
ℹ 指令范围
SKILL.md limits actions to creating files under the workspace, managing state files, and calling 'openclaw cron add/rm'. The script reads an optional config.env and will create/update files under the configured WORKSPACE_DIR (defaulting to /home/miles/.openclaw/workspace). This is expected, but users should note it will write and modify files in that workspace and create cron spec JSONs and run the local openclaw CLI.
✓ 安装机制
No install spec — instruction-only with a bundled script. Nothing is downloaded or extracted from external URLs; risk from install mechanism is minimal.
✓ 凭证需求
The skill declares no required environment variables or credentials and the script only optionally loads a local config.env. It does not request unrelated secrets or remote API keys. The only external dependency is the local 'openclaw' CLI (used to register/unregister cron jobs), which aligns with the purpose.
✓ 持久化与权限
Skill is not always-enabled and does not request elevated platform privileges. It writes only to its workspace/task directories and does not modify other skills or global agent config beyond calling the openclaw CLI, which is consistent with its role.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/2/22
Initial public release
● 可疑
安装命令 点击复制
官方npx clawhub@latest install task-father
镜像加速npx clawhub@latest install task-father --registry https://cn.clawhub-mirror.com
技能文档
Create and manage durable, file-based task state machines under the OpenClaw workspace.
Target filesystem shape:
TASK_REGISTRY.md(global index)tasks//
TASK.md (front matter + purpose/decisions/blockers/changelog + capabilities)
- TODOS.md (checklist)
- scripts/
- crons/
- artifacts/
- optional queue-state files (queue.jsonl, done.jsonl, failed.jsonl, lock.json)Prerequisites
Run on host where OpenClaw is running:
python3 --versionopenclaw statusopenclaw cron --help
Configuration (portable)
Skill-local config files:
- Example (shareable):
config.env.example - Real machine config:
config.env
Keys:
WORKSPACE_DIR(default:/home/miles/.openclaw/workspace)TASKS_DIR(default:tasks)REGISTRY_FILE(default:TASK_REGISTRY.md)DEFAULT_AGENT_ID(default:main)DEFAULT_CRON_TZ(default:America/Indianapolis)
Initialization / Installation / Onboarding
Preferred (chat-first)
Answer in chat:
1) task slug (filesystem-safe) 2) task title 3) task purpose 4) optional skills/plugins/tools expected for this task 5) whether queue files are needed 6) whether a cron job should be created now
Then run:
python3 scripts/task_father.py init--title "..." --purpose "..." --skills "a,b" --plugins "x,y" --tools "read,write,exec" - optional queue mode:
python3 scripts/task_father.py enable-queue
- optional cron setup:
python3 scripts/task_father.py cron-add --cron "/10 " --message "" --name "task-" Optional (terminal)
cp config.env.example config.env- Edit
config.env - Initialize task:
python3 scripts/task_father.py init --title "..." Lifecycle commands
- Set task status (updates
state.json+ changelog):
python3 scripts/task_father.py set-state active
- Append changelog entry:
python3 scripts/task_father.py log "blocked by API quota"
- Enable queue files:
python3 scripts/task_father.py enable-queue
- Add cron:
python3 scripts/task_father.py cron-add --cron "/5 " --message "..." --name "task-"
- Remove cron:
python3 scripts/task_father.py cron-rm --name "task-" Task documentation contract
Each task must contain:
1) TASK.md with front matter and sections:
- Purpose
- Important Decisions
- Blockers
- Capabilities (skills/plugins/tools)
- Change Log (timestamp + short description)
2) TODOS.md with checklist items.
3) If queue-style long processing is used:
queue.jsonl,done.jsonl,failed.jsonl,lock.json.
4) Scripts under:
/scripts/
5) Cron files under:
/crons/
Reproducibility notes
- Keep machine-specific values in
config.env, not inSKILL.md. - Keep logs append-only where possible.
- Use small resumable batches for long work.
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制