← Back to Skills Marketplace
12982
Downloads
5
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install clawflows
Description
Search, install, and run multi-skill automations from clawflows.com. Combine multiple skills into powerful workflows with logic, conditions, and data flow between steps.
Usage Guidance
Install only if you are comfortable trusting the `clawflows` npm CLI and the automations you choose from its registry. Before running a workflow, inspect the downloaded YAML, run `clawflows check`, use `--dry-run`, and be especially cautious with automations that send email, modify calendars or databases, access accounts, publish content, or enable scheduled execution.
Capability Analysis
Type: OpenClaw Skill
Name: clawflows
Version: 1.0.0
The skill instructs the agent to install the 'clawflows' CLI globally via `npm i -g clawflows` (SKILL.md), introducing a supply chain risk from the npm package. The installed CLI is designed to download and execute external automation YAML files, which can then trigger arbitrary shell commands defined within other skills' `CAPABILITY.md` files. This nested execution model, combined with external downloads and the ability to provide instructions for persistence (cron jobs), creates a significant attack surface for arbitrary code execution and potential compromise, even if no direct malicious payload is present in this bundle.
Capability Assessment
Purpose & Capability
The purpose is coherent: the skill is for searching, installing, and running multi-skill automations. The concern is that those automations can invoke broad capabilities including database writes, calendar read/write, email send/receive, social search, and other connected skills.
Instruction Scope
The artifact documents `check` and `--dry-run`, but it does not clearly define approval boundaries, trust requirements, review steps for downloaded YAML, or containment for side-effecting workflows before `clawflows run` executes them.
Install Mechanism
Installation uses a global npm package, `npm i -g clawflows`, and the reviewed artifact does not include the CLI source. This is aligned with a CLI-based skill, but shifts runtime trust to the npm package and registry content.
Credentials
The skill itself does not request credentials directly, but its workflows can exercise whatever privileges are available through installed skills, including email, calendar, database, social, and network-connected integrations.
Persistence & Privilege
Scheduling is disclosed through `clawflows enable`, which says it shows cron setup instructions, and `disable` is documented. Scheduled automations still represent recurring delegated authority and should be reviewed carefully.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install clawflows - After installation, invoke the skill by name or use
/clawflows - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - multi-skill automation framework
Metadata
Frequently Asked Questions
What is Clawflows?
Search, install, and run multi-skill automations from clawflows.com. Combine multiple skills into powerful workflows with logic, conditions, and data flow between steps. It is an AI Agent Skill for Claude Code / OpenClaw, with 12982 downloads so far.
How do I install Clawflows?
Run "/install clawflows" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Clawflows free?
Yes, Clawflows is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Clawflows support?
Clawflows is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Clawflows?
It is built and maintained by Cluka-399 (@cluka-399); the current version is v1.0.0.
More Skills