← Back to Skills Marketplace
Workflow
by
Anil Chandra Naidu Matcha
· GitHub ↗
· v0.1.0
· MIT-0
306
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install muapi-workflow-skill
Description
Build, run, and visualize multi-step AI generation workflows. The AI architect translates natural language descriptions into connected node graphs — chain im...
Usage Guidance
This skill is coherent with its claimed purpose (it wraps the muapi CLI), but two things need your attention before installing or allowing autonomous runs: (1) SKILL.md tells the agent to run `pip install --upgrade /path/to/muapi-cli` every session — installing code from an unspecified workspace path can run arbitrary code and should only be done if you control and have audited that repository; (2) the run script allows specifying a `--webhook` URL which could be used to send outputs to any external endpoint, so avoid providing untrusted webhook URLs and confirm you trust the destination. If you plan to use this skill, require the user to confirm any install-from-source step and avoid using webhooks or review their endpoints. If possible, ask the publisher for an explicit declaration of the required muapi CLI binary (version/source) or a vetted install mechanism (e.g., a specific PyPI release or GitHub release URL with checksum).
Capability Analysis
Type: OpenClaw Skill
Name: muapi-workflow-skill
Version: 0.1.0
The skill bundle contains instructions in SKILL.md directing the AI agent to perform a 'pip install --upgrade' from a local workspace path at the start of every session, which is a high-risk operation that modifies the execution environment. While the shell scripts (e.g., scripts/generate-workflow.sh, scripts/run-workflow.sh) appear to be functional wrappers for the muapi CLI, they lack explicit input validation. The combination of environment-altering instructions and broad shell execution capabilities warrants a suspicious classification despite the lack of clear malicious intent.
Capability Assessment
Purpose & Capability
The name/description (build and run muapi workflows) align with the included shell wrappers that call `muapi workflow ...`. However the skill does not declare that the `muapi` CLI is required in its registry metadata even though every script depends on it; the SKILL.md additionally instructs reinstalling a local `muapi-cli` source tree, which is unusual and should have been declared.
Instruction Scope
The SKILL.md directs the agent to 'reinstall from source at the start of every session' via `pip install --upgrade /path/to/muapi-cli` (a path in the workspace). That instruction effectively tells the agent to run package installation of arbitrary local code each session, which can result in arbitrary code execution. Otherwise the runtime instructions are scoped to listing, creating, editing, and running workflows and specify that the agent must ask the user for required inputs (good constraint).
Install Mechanism
There is no formal install spec, but the guidance to run `pip install --upgrade /path/to/muapi-cli` is a high-risk install pattern because it installs code from an unspecified local path (workspace). This will write and execute code on the agent environment and was not codified in the registry metadata; no checksums or known release sources are provided.
Credentials
The skill requests no env vars, which is reasonable, but the run wrapper accepts a `--webhook` argument and forwards it to `muapi workflow execute`. That provides a straightforward channel to send workflow outputs to an arbitrary external endpoint if used — a possible exfiltration vector. Combined with the SKILL.md's install-from-workspace instruction, the overall credential/IO surface is larger than the description suggests.
Persistence & Privilege
The skill does not request permanent presence (always:false), does not modify other skills, and contains only small shell wrappers. It doesn't request elevated platform privileges in the manifest.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install muapi-workflow-skill - After installation, invoke the skill by name or use
/muapi-workflow-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
muapi-workflow-skill v0.1.0
- Initial release of the muapi-workflow skill.
- Enables users to build, run, and visualize multi-step AI generation workflows using natural language.
- Supports chaining image, video, and editing nodes into automated pipelines.
- Provides commands for generating, discovering, editing, and executing workflows via the `muapi` CLI.
- Detailed user and agent protocols included for workflow selection and input handling.
- Includes examples and full CLI reference for all core operations.
Metadata
Frequently Asked Questions
What is Workflow?
Build, run, and visualize multi-step AI generation workflows. The AI architect translates natural language descriptions into connected node graphs — chain im... It is an AI Agent Skill for Claude Code / OpenClaw, with 306 downloads so far.
How do I install Workflow?
Run "/install muapi-workflow-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Workflow free?
Yes, Workflow is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Workflow support?
Workflow is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Workflow?
It is built and maintained by Anil Chandra Naidu Matcha (@anil-matcha); the current version is v0.1.0.
More Skills