← 返回 Skills 市场
198
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install n8n-code-automation-nelmaz
功能描述
Integrate n8n workflow automation into coding tasks. Use when building automated workflows, integrating n8n into development pipelines, executing existing wo...
安全使用建议
Do not install or run this skill until the author resolves the conflicting files and clarifies credential handling. Specific actions to request or verify from the publisher: (1) which SKILL.md is canonical (v1.1.0 or v1.0.0)? remove the stale file that hardcodes https://n8n.nelflow.cloud; (2) update registry metadata to list required environment variables (N8N_URL, N8N_API_KEY, optional N8N_PERMISSION_MODE) and any config paths the skill will write to; (3) remove any instructions that tell users to store credentials in ~/.openclaw/openclaw.json (if the skill truly requires env vars only, examples must reflect that); (4) confirm the audit log path and ensure it does not expose secrets; (5) verify the publisher identity/hosting (nelflow.cloud mention is suspicious if not part of official n8n infrastructure). If you must use it before fixes, only run in an isolated/test environment, supply least-privilege API keys, keep permission mode on readonly, and do not store high-privilege keys in files.
能力评估
Purpose & Capability
The skill purports to integrate with n8n (expected). However the registry metadata declared no required environment variables or config paths while the SKILL.md repeatedly instructs you to supply N8N_URL and N8N_API_KEY — those credentials are required in practice but not declared. Additionally two included SKILL.md files disagree about the default n8n URL (one hardcodes https://n8n.nelflow.cloud; the other claims that hardcoded domain was removed), indicating stale or conflicting content.
Instruction Scope
Instructions include commands that will read/use credentials and modify configuration (examples show editing ~/.openclaw/openclaw.json) and reference writing audit logs to /data/.openclaw/logs/n8n-audit.log. The nested SKILL.md explicitly shows insecure behavior (adding creds to ~/.openclaw/openclaw.json and a hardcoded external domain). The root SKILL.md claims to forbid config-file creds, but that contradictory guidance is present in other shipped files — giving the agent ambiguous authority over credentials and config paths.
Install Mechanism
This is instruction-only with no install spec and no code files; nothing will be written or executed by an install step. That lowers risk compared to packages that download/execute code.
Credentials
The package metadata declares no required env vars, but runtime instructions require N8N_URL, N8N_API_KEY, and optionally N8N_PERMISSION_MODE. The skill also suggests (in one included document) adding creds to ~/.openclaw/openclaw.json — a config path that was not declared. The number and sensitivity of credentials referenced is proportionate to an n8n connector, but the omission from metadata and contradictory guidance about storage location are problematic.
Persistence & Privilege
The skill does not request 'always: true' or autonomous elevation. It references creating an audit log at /data/.openclaw/logs/n8n-audit.log (persistence of logs). The skill did not declare that config path in metadata; you should confirm what will be written, where, and with what permissions before trusting it.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install n8n-code-automation-nelmaz - 安装完成后，直接呼叫该 Skill 的名称或使用
/n8n-code-automation-nelmaz触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
CRITICAL SECURITY UPDATE: Fixed all vulnerabilities identified in v1.0.0 - credential isolation, input validation, audit logging, rate limiting, and granular permissions. API keys no longer hardcoded or stored in config files. HTTPS enforcement. Three permission levels. Audit logging.
v1.0.0
Complete n8n integration for coding workflows with 10+ automation patterns
元数据
常见问题
N8n Code Automation Nelmaz 是什么？
Integrate n8n workflow automation into coding tasks. Use when building automated workflows, integrating n8n into development pipelines, executing existing wo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 198 次。
如何安装 N8n Code Automation Nelmaz？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install n8n-code-automation-nelmaz」即可一键安装，无需额外配置。
N8n Code Automation Nelmaz 是免费的吗？
是的，N8n Code Automation Nelmaz 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
N8n Code Automation Nelmaz 支持哪些平台？
N8n Code Automation Nelmaz 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 N8n Code Automation Nelmaz？
由 nelmaz（@nelmaz）开发并维护，当前版本 v1.1.0。
推荐 Skills