ToolFlow OpenClaw Operator

Enables running jobs as durable, stepwise ToolFlow workflows with approvals, recovery, and progress tracking via OpenClaw integration.

This package appears to do what it claims: it bundles a ToolFlow plugin and provides scripts to link it into OpenClaw. Before installing: (1) be aware the installer expects the openclaw CLI and node on your host (metadata omitted these requirements); (2) review the bundled dist/entry.js and runtime-cli.js (they are included) or run the installer in an isolated environment if you cannot audit them fully; (3) do not enable 'enableElevated' or broad 'elevatedAllowedCommands' unless you trust the plugin and want it to run shell commands on your host; (4) watch out for example workflows with absolute paths (they are examples and not auto-run, but if executed they can read local files); and (5) prefer to install only from a known source (canonical GitHub repo cited) and confirm upstream provenance if possible.

Type: OpenClaw Skill Name: toolflow-openclaw-operator Version: 0.3.0 The bundle provides a structured workflow management system ('ToolFlow') for OpenClaw agents, designed to handle multi-step tasks with durable state and recovery. While the system includes high-risk capabilities such as file reading and command execution (defined in 'toolflow-bundle/plugin/dist/entry.js'), these are the stated purpose of the tool and are implemented with significant security controls, including a cryptographic 'grant' and 'receipt' system (HMAC-SHA256), command allowlists, and mandatory approval boundaries for elevated work. The installation script ('scripts/install-toolflow-openclaw.sh') uses standard local linking for OpenClaw plugins and does not perform unauthorized network requests or persistence modifications.