Intelligent skill orchestrator that compiles natural language requests into secure, reusable workflows

This package mostly does what it says (parse requests, find skills, scan code, and compose new skills), but take these precautions before installing/running: - Review requirements.txt and install dependencies in an isolated environment (virtualenv/container). The README and SKILL.md disagree about dependencies. - Run Flow in a sandbox or non-sensitive workspace first: by default it will read from ./skills, write composed flows to ./flows, and update ./skill_registry.json. If you have an important registry file, back it up or set registry_path in a config to a different location. - The composer can write/generated Python code and can accept templates — do not point it at untrusted templates or inputs that might cause it to write and later execute malicious code. - The code bundle shows signs of truncation/bugs (incomplete variable names / truncated functions). Expect runtime exceptions; review the full source in your environment before trusting automated composition. - Increase the scanner strictness (set security_level to 'strict') if you plan to auto-compose flows from third-party skills; inspect any skills that the scanner marks as HIGH/CRITICAL before composing. - Because the package author and homepage are unknown, prefer to run it locally in an isolated environment and perform a manual code review on any composed flows before executing them. What would change this assessment: receiving the complete, non-truncated source files (showing fixes), a clear statement of which dependencies are optional, and assurance that composed flows do not automatically execute third-party code (only write code for manual review) would raise confidence and could move the verdict toward benign.

Type: OpenClaw Skill Name: flow Version: 0.1.4 The OpenClaw AgentSkills bundle is classified as benign. The core functionality involves an 'Intelligent Skill Orchestrator' that processes natural language requests to compose and execute new skills. Crucially, the `skill_scanner_integration.py` module is designed to actively detect and block malicious patterns such as arbitrary code execution (`eval`, `exec`, `os.system`), data exfiltration, and crypto mining indicators. The `flow.py` orchestrator explicitly checks and blocks skills with critical security issues. The `SKILL.md` instructions and all code files are aligned with the stated purpose of building secure workflows and do not contain any evidence of intentional harmful behavior or prompt injection attempts against the agent. All dependencies listed in `requirements.txt` are legitimate and include several security and code analysis tools, further supporting its defensive posture.