← Back to Skills Marketplace
lijinfeng2011

openc3-flow

by lijinfeng2011 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
249
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openc3-flow
Description
Get all CI/CD flows from Open-C3 platform. Returns the complete list of flows in the system.
Usage Guidance
Before installing: (1) note the registry metadata omission — SKILL.md and the script require OPEN_C3_URL, APP_NAME, and APP_KEY even though the registry lists none; ask the publisher to correct the manifest. (2) Inspect config.env.example and confirm config.env will be gitignored and stored securely; avoid keeping APP_KEY in plaintext in shared repos. (3) Only point OPEN_C3_URL at trusted Open‑C3 servers; the script will send the APP_KEY to whatever URL you configure. (4) If you want stronger security, ask for support to use a secrets manager or agent-provided secure env rather than a local file. (5) The skill source is small and readable — review the files yourself and confirm the owner and homepage (both are missing) before trusting production credentials.
Capability Analysis
Type: OpenClaw Skill Name: openc3-flow Version: 1.0.0 The skill is a legitimate tool for retrieving CI/CD flow information from an Open-C3 platform. It uses a bash script (scripts/list-all-flows.sh) to perform authenticated API requests via curl and formats the output using jq. The logic is transparent, aligns with the stated purpose in SKILL.md, and contains no evidence of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The declared runtime binaries (curl, jq) and the included script match the stated purpose of calling Open‑C3's API and formatting results. However, the registry metadata claims no required environment variables while the SKILL.md and script clearly require OPEN_C3_URL, APP_NAME, and APP_KEY. That mismatch is an incoherence in the manifest.
Instruction Scope
The SKILL.md and scripts are narrowly scoped: they source a local config.env, perform a single GET to ${OPEN_C3_URL}/api/ci/group/ci/dump with appname/appkey headers, validate the response, and format output. The instructions do not access system-wide config, other credentials, or send data to third‑party endpoints beyond the configured OPEN_C3_URL.
Install Mechanism
This is an instruction-only skill with a small helper script and no install spec or external downloads. No archive extraction or network installs are requested, so the install mechanism itself is low risk.
Credentials
The skill requires sensitive credentials (APP_KEY, APP_NAME) and a target URL, but the registry metadata does not declare them. The script expects these values in a plaintext config.env inside the skill directory — storing secrets in a file in the skill folder is a proportionality and secret‑management concern. There is no primaryEnv declared and no guidance to use a secure secret store; the README only notes to gitignore config.env.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system config. Autonomous invocation (disable-model-invocation: false) is the platform default; nothing here elevates privilege beyond normal operation.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install openc3-flow
  3. After installation, invoke the skill by name or use /openc3-flow
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release—retrieve a complete list of CI/CD flows from the Open-C3 platform. - Lists all flows via the Open-C3 API `/api/ci/group/ci/dump` - Authentication via configurable app name and key headers - Output includes total flow count, formatted table, and group statistics - Usage examples and configuration details provided in SKILL.md - Requires `curl` and `jq` dependencies
Metadata
Slug openc3-flow
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is openc3-flow?

Get all CI/CD flows from Open-C3 platform. Returns the complete list of flows in the system. It is an AI Agent Skill for Claude Code / OpenClaw, with 249 downloads so far.

How do I install openc3-flow?

Run "/install openc3-flow" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is openc3-flow free?

Yes, openc3-flow is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does openc3-flow support?

openc3-flow is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created openc3-flow?

It is built and maintained by lijinfeng2011 (@lijinfeng2011); the current version is v1.0.0.

💬 Comments