📦 Task Resume — 断点续作
v1.3.0智能断点续作：当用户因临时切换而中断任务时，自动将未完成步骤排队并恢复，无需手动回溯，保障工作流连续高效。
0· 651·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement what it says (a cross-session interrupted-task queue) but has several operational risks you should consider before installing:
- Shared queue: It stores queued tasks in a workspace-global file (memory/task-resume-queue.json) shared across main/clone/group sessions. If you have multiple users or isolated contexts in the same workspace, tasks and their context could be visible across sessions. Avoid putting secrets in task context.
- Log reading: The recover comma...详细分析 ▾
ℹ 用途与能力
Name/description align with the code and instructions: the included script implements a FIFO queue persisted at memory/task-resume-queue.json and provides add/pop/list/status/clear/recover commands. Requiring a workspace-global (cross-session) queue file and a recover-from-log helper is consistent with the stated goal of cross-session resume.
⚠ 指令范围
SKILL.md requires message-time enforcement (enqueue before handling any new user message), shared queue usage across sessions, and recommends a watchdog cron that will 'auto-continue' tasks every 30 minutes. It also documents recovering from arbitrary session .jsonl logs (reads a path like ~/.openclaw/agents/main/sessions/<session>.jsonl). Those instructions expand the agent's scope beyond simple bookkeeping: they enable cross-session state mixing and periodic autonomous execution that may act without explicit user confirmation. The recover command reads arbitrary file paths specified at runtime, which could expose local session data if misused.
✓ 安装机制
No install spec; this is instruction-plus-script only. Nothing is downloaded from the network or written to unusual system locations by an installer. Risk surface comes only from the included script's runtime behavior.
ℹ 凭证需求
The skill declares no required environment variables or credentials. However, it persists a workspace-global JSON queue (memory/task-resume-queue.json) that is shared across sessions/clones and could leak context between sessions. The SKILL.md explicitly warns not to store secrets in queue content; that guidance is necessary but relies on correct operator behavior.
⚠ 持久化与权限
The skill is not 'always: true', but the SKILL.md encourages adding a watchdog cron/heartbeat that would run periodically and 'auto-continue' tasks. Combined with normal autonomous invocation, that pattern grants the skill potential ongoing background action (periodic checks and automatic continuation) and cross-session persistence via the shared queue file. That operational model can increase blast radius if the skill is granted broad invoke privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.02026/2/24
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install task-resume
镜像加速npx clawhub@latest install task-resume --registry https://cn.longxiaskill.com镜像同步中