← 返回 Skills 市场
3569
总下载
3
收藏
12
当前安装
2
版本数
在 OpenClaw 中安装
/install n8n-api
功能描述
Operate n8n via its public REST API from OpenClaw. Use for workflow management, executions, and automation tasks such as listing, creating, publishing, triggering, or troubleshooting. Works with both self-hosted n8n and n8n Cloud.
安全使用建议
This skill appears to be a straightforward n8n REST-API helper, but there are some practical omissions in the package metadata you should address before installing: (1) Verify the skill's source/owner — no homepage and an opaque owner ID increases risk. (2) Expect to provide N8N_API_KEY and N8N_API_BASE_URL at runtime; do not use an account-wide admin key if you can avoid it — create a limited-permission API key or test account. (3) The SKILL.md assumes curl and jq are available; ensure those binaries exist in the execution environment or the commands will fail. (4) Be cautious about storing the API key in plaintext (.n8n-api-config) — prefer environment-only injection or a secrets store. (5) Test the skill against a non-production n8n instance or a scoped test API key first, since the instructions operate on real data and can activate/deactivate workflows or retry executions. (6) If you want stronger assurances, ask the publisher to update registry metadata to declare required env vars and any required binaries so the platform can surface the credential requirement up front.
功能分析
Type: OpenClaw Skill
Name: n8n-api
Version: 1.0.1
The skill bundle is designed to interact with the n8n public REST API, as stated in SKILL.md. All `curl` commands in SKILL.md target a user-configured n8n instance (`$N8N_API_BASE_URL`) and use a user-provided API key (`$N8N_API_KEY`). There is no evidence of data exfiltration to unauthorized endpoints, malicious execution patterns (e.g., `curl|bash`), persistence mechanisms, or obfuscation. The instructions in SKILL.md for the AI agent are aligned with the stated purpose of managing n8n workflows and executions, and do not constitute prompt injection for malicious purposes. The `assets/n8n-api-endpoints.md` file is purely documentation of the n8n API, not executable code.
能力评估
Purpose & Capability
The SKILL.md content is coherent with the name/description: it shows curl examples, endpoints, and flows for managing n8n workflows and executions. However the registry metadata lists no required environment variables or binaries while the instructions clearly expect N8N_API_KEY and N8N_API_BASE_URL (and implicitly curl and jq). That metadata omission is inconsistent with the skill's practical needs.
Instruction Scope
Instructions stay within the expected scope (calling the n8n API, listing/activating workflows, triggering webhooks, reviewing executions). They instruct the agent to use environment variables and optionally store them in a file (.n8n-api-config). The skill runs commands against production data (playground on self-hosted instance uses real data), so callers should avoid using production API keys for experiments. No instructions request unrelated system files or unrelated credentials.
Install Mechanism
This is instruction-only (no install spec, no code files to execute). That is low-risk from an install-bytes perspective — nothing is fetched or written by an installer. The runtime risk comes from network/API access guided by the SKILL.md, not from an install step.
Credentials
The skill relies on a sensitive credential (N8N_API_KEY) and an instance URL, but the registry metadata lists no required env vars or primary credential. That mismatch is concerning because the platform metadata does not surface the need to provide an API key. The instructions also suggest storing credentials in a file (.n8n-api-config) which, if used without care, could lead to plaintext credential exposure. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true and does not declare persistent system-wide changes. The only persistence suggestion is storing recommended env vars in a local config file; it does not instruct modifying other skills or global agent settings. Model invocation is allowed (default) — normal for skills — and does not on its own change the risk posture.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install n8n-api - 安装完成后，直接呼叫该 Skill 的名称或使用
/n8n-api触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added new documentation file: assets/n8n-api-endpoints.md.
- SKILL.md now references the full endpoint list available in the new file.
v1.0.0
- Major revision: refocused skill to use the official n8n public REST API directly via HTTP requests.
- Removed bundled Python client and all code samples/instructions tied to the old script-based interface.
- Added step-by-step examples with curl for core actions: listing workflows, execution management, webhook triggering, and health checks.
- Clarified authentication, API key setup, environment variable usage, and new config practices.
- Provided usage notes, troubleshooting tips, and API endpoint references tailored to both self-hosted and n8n Cloud.
- Skill now references documentation in `assets/n8n-api.endpoints.md` instead of removed `references/api.md`.
元数据
常见问题
n8n API 是什么？
Operate n8n via its public REST API from OpenClaw. Use for workflow management, executions, and automation tasks such as listing, creating, publishing, triggering, or troubleshooting. Works with both self-hosted n8n and n8n Cloud. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 3569 次。
如何安装 n8n API？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install n8n-api」即可一键安装，无需额外配置。
n8n API 是免费的吗？
是的，n8n API 完全免费（开源免费），可自由下载、安装和使用。
n8n API 支持哪些平台？
n8n API 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 n8n API？
由 codedao12（@codedao12）开发并维护，当前版本 v1.0.1。
推荐 Skills