← 返回 Skills 市场
9800
总下载
5
收藏
71
当前安装
1
版本数
在 OpenClaw 中安装
/install clawflows
功能描述
Search, install, and run multi-skill automations from clawflows.com. Combine multiple skills into powerful workflows with logic, conditions, and data flow between steps.
安全使用建议
Review the npm package and workflow YAML before installing or running anything. Use `clawflows check` and `--dry-run` first, avoid untrusted registry workflows, and be especially careful with automations that send email, write calendar events, update databases, publish content, or enable cron scheduling.
功能分析
Type: OpenClaw Skill
Name: clawflows
Version: 1.0.0
The skill instructs the agent to install the 'clawflows' CLI globally via `npm i -g clawflows` (SKILL.md), introducing a supply chain risk from the npm package. The installed CLI is designed to download and execute external automation YAML files, which can then trigger arbitrary shell commands defined within other skills' `CAPABILITY.md` files. This nested execution model, combined with external downloads and the ability to provide instructions for persistence (cron jobs), creates a significant attack surface for arbitrary code execution and potential compromise, even if no direct malicious payload is present in this bundle.
能力评估
Purpose & Capability
The stated purpose matches the artifact: search, install, and run multi-skill automations. The concern is breadth: downloaded automations can invoke capabilities such as database writes, calendar read/write, email send/receive, and other connected skills.
Instruction Scope
The skill documents check and dry-run commands, but it does not establish clear approval boundaries, allowlists, containment, rollback, or required review before side-effecting workflows run.
Install Mechanism
Installation uses a global npm package, `clawflows`, and the reviewed artifact does not include the CLI source. This is purpose-aligned for a CLI-based skill but leaves runtime behavior dependent on the npm package and registry content.
Credentials
The skill itself declares no direct credentials, but automations may exercise privileges from other installed skills and accounts, including email, calendar, database, social search, and similar integrations.
Persistence & Privilege
Scheduling is disclosed through an enable command that shows cron setup instructions, with a disable command documented. Users should still treat enabled automations as recurring delegated authority.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install clawflows - 安装完成后，直接呼叫该 Skill 的名称或使用
/clawflows触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - multi-skill automation framework
元数据
常见问题
Clawflows 是什么？
Search, install, and run multi-skill automations from clawflows.com. Combine multiple skills into powerful workflows with logic, conditions, and data flow between steps. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 9800 次。
如何安装 Clawflows？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawflows」即可一键安装，无需额外配置。
Clawflows 是免费的吗？
是的，Clawflows 完全免费（开源免费），可自由下载、安装和使用。
Clawflows 支持哪些平台？
Clawflows 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Clawflows？
由 Cluka-399（@cluka-399）开发并维护，当前版本 v1.0.0。
推荐 Skills