← Back to Skills Marketplace
cjstate

自动化工作流引擎

by CJstate · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
124
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install xh-auto-workflow
Description
自动化工作流引擎。定时执行任务链:数据采集→处理→通知→存档。支持cron定时、 webhook触发、文件监控。
Usage Guidance
Do not run this package or `npm install` in production or on a host with sensitive data yet. Key concerns: (1) workflow.js (the main executable) is missing from the bundle — ask the publisher for the source and review it before running; (2) the skill documents email/DB/API tasks but lists no required credentials — determine how secrets are supplied and ensure least-privilege credentials; (3) `npm install` will fetch third-party modules — consider auditing dependencies and running in an isolated container or sandbox; (4) if you need this functionality, request the complete repository or a published release (with homepage/source) and verify the code and configuration paths. Providing those artifacts (workflow.js, README on a public repo, declared env vars) would raise confidence and allow a re-evaluation.
Capability Analysis
Type: OpenClaw Skill Name: xh-auto-workflow Version: 1.0.0 The skill bundle describes a standard automation workflow engine supporting cron tasks, file monitoring, and HTTP requests. The dependencies in package.json (node-cron, axios, nodemailer, chokidar) are appropriate for the stated functionality, and the SKILL.md documentation contains no malicious instructions or prompt injection attempts.
Capability Assessment
Purpose & Capability
Name/description describe a workflow engine with HTTP, email, and database tasks. package.json lists main=workflow.js, but that file is not included. The skill declares no required env vars or credentials even though email/DB/API tasks normally require secrets — this is an internal inconsistency.
Instruction Scope
SKILL.md instructs running `npm install` and `node workflow.js --daemon/--run`, references workflow.json that reads/writes files, sends HTTP requests, and sends email. The instructions do not name required credential/env vars or specific paths to monitor, giving the runtime broad discretion and lacking the context needed to safely run these operations.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to run `npm install`. package.json lists common npm deps (node-cron, chokidar, axios, nodemailer) which are plausible for this app; npm install will download third-party packages from the public registry (moderate risk).
Credentials
The skill declares no required environment variables or primary credential, yet its documented tasks (SMTP/email, database, API calls, webhook callbacks) inherently require credentials/configuration. This mismatch could lead to unclear or ad-hoc credential handling if the code exists elsewhere.
Persistence & Privilege
The skill itself is not marked always:true, but SKILL.md encourages running `--daemon` with file monitoring and webhook triggers — running it will create a persistent process with filesystem and network access. That runtime persistence is expected for a scheduler but increases risk if the code and required secrets are not audited.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install xh-auto-workflow
  3. After installation, invoke the skill by name or use /xh-auto-workflow
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Auto Workflow Pro 1.0.0 introduces a powerful, flexible task automation engine. - 支持可视化任务链编排,包括串行与并行流程、数据传递。 - 提供多样化任务触发方式:cron定时、webhook、文件监控、队列消息。 - 内置任务类型丰富,涵盖HTTP请求、数据转换、文件和数据库操作、邮件通知等。 - 便捷的命令行管理,包括执行、守护、状态查询等功能。 - 提供workflow.json示例及多场景应用模板,快速上手与扩展。
Metadata
Slug xh-auto-workflow
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is 自动化工作流引擎?

自动化工作流引擎。定时执行任务链:数据采集→处理→通知→存档。支持cron定时、 webhook触发、文件监控。 It is an AI Agent Skill for Claude Code / OpenClaw, with 124 downloads so far.

How do I install 自动化工作流引擎?

Run "/install xh-auto-workflow" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 自动化工作流引擎 free?

Yes, 自动化工作流引擎 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 自动化工作流引擎 support?

自动化工作流引擎 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 自动化工作流引擎?

It is built and maintained by CJstate (@cjstate); the current version is v1.0.0.

💬 Comments