← 返回 Skills 市场
n8n Workflow Templates
作者
yoder-bawt
· GitHub ↗
· v1.0.0
1058
总下载
0
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install n8n-workflow-templates
功能描述
Production-ready n8n workflow templates for AI agents. Deploy pre-built automations for webhooks, RSS monitoring, health checks, social metrics, and data bac...
安全使用建议
This package appears to be what it says (n8n workflow templates + small bash helpers), but before using it: 1) Review each workflow JSON—some templates include executeCommand nodes that will run shell commands (pg_dump, df, ls, etc.) inside the n8n process; only deploy these to a controlled host where running those commands is safe and expected. 2) Ensure python3 is available on the machine where you run the included scripts (deploy/list scripts call python3 for JSON parsing/formatting) or edit the scripts to remove that dependency. 3) The templates reference TELEGRAM_CHAT_ID via environment expressions and expect external platform credentials (Telegram, Twitter, LinkedIn, DB credentials) to be set in your n8n instance; these are not declared as required env vars in the skill metadata—set them intentionally in n8n or replace the placeholders with proper credentials. 4) Do not deploy these templates to shared or multi-tenant n8n instances without auditing the executeCommand nodes and replacing any commands that could leak data or escalate privileges. 5) If you need higher confidence, ask the author for an explicit list of runtime requirements (python3, any n8n env vars like TELEGRAM_CHAT_ID) and confirm whether executeCommand nodes assume access to local databases/files.
功能分析
Type: OpenClaw Skill
Name: n8n-workflow-templates
Version: 1.0.0
The skill bundle is classified as suspicious due to critical shell injection vulnerabilities. In `deploy.sh`, the `WORKFLOW_NAME` argument is directly interpolated into a `python3 -c` command, allowing arbitrary Python code execution and subsequent shell command execution if the OpenClaw agent does not sanitize user input. Similar shell injection risks exist in `activate-workflow.sh`, `delete-workflow.sh`, and `list-workflows.sh` where arguments are passed to `curl` or `python3 -c` without robust sanitization. Additionally, the `webhook-to-telegram.json` workflow is vulnerable to markdown injection in Telegram messages if a malicious webhook payload is received, as it directly incorporates user input without sanitization.
能力评估
Purpose & Capability
Name, description, scripts, and JSON templates all align: this package provides n8n workflow templates and small bash utilities to deploy/list/manage workflows. Requested binaries (curl, bash) and env vars (N8N_HOST, N8N_API_KEY) are relevant. However, the templates and scripts implicitly rely on additional runtime capabilities not declared (see below), which is an inconsistency with the declared requirements.
Instruction Scope
SKILL.md and README instruct running the included scripts and editing templates, but they do not call out that several templates include executeCommand nodes that will run shell commands (e.g., df, pg_dump, ls) inside the n8n runtime and that code nodes reference environment variables within n8n. The documentation also omits that deploy/list scripts use python3 for JSON parsing/pretty-printing even though python3 is not listed as a required binary. These omissions expand the runtime scope beyond what the skill declares.
Install Mechanism
No install spec — instruction-only with bundled scripts and templates. Nothing is downloaded or executed automatically during installation; files are local and visible for review. This is low install risk.
Credentials
Declared required env vars are only N8N_HOST and N8N_API_KEY (which are appropriate). However: (1) multiple templates reference TELEGRAM_CHAT_ID via n8n's {{$env.VAR}} expression (or otherwise expect platform API credentials) but TELEGRAM_CHAT_ID is not declared in requires.env, (2) templates expect external service credentials (Twitter, LinkedIn, Telegram) to be configured in n8n credentials or environment but the skill metadata doesn't enumerate these, and (3) scripts invoke python3 though python3 is not listed in required binaries. These are mismatches between what is declared and what the templates actually require to function.
Persistence & Privilege
always:false and user-invocable:true. The skill does not request permanent presence or modify other skills. There is no autonomous installation hook or elevated platform privileges requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install n8n-workflow-templates - 安装完成后，直接呼叫该 Skill 的名称或使用
/n8n-workflow-templates触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of production-ready automation templates and scripts for n8n.
- Provides five pre-built workflow templates: webhook-to-telegram, rss-monitor, health-check, social-metrics, and data-backup.
- Includes deployment and workflow management scripts for easy setup and control via the n8n API.
- Supports environment variable configuration for host and API key.
- Templates are ready for common automation scenarios, with guidance for customization.
- Compatible with n8n version 1.0+ and requires curl and bash.
元数据
常见问题
n8n Workflow Templates 是什么？
Production-ready n8n workflow templates for AI agents. Deploy pre-built automations for webhooks, RSS monitoring, health checks, social metrics, and data bac... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1058 次。
如何安装 n8n Workflow Templates？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install n8n-workflow-templates」即可一键安装，无需额外配置。
n8n Workflow Templates 是免费的吗？
是的，n8n Workflow Templates 完全免费（开源免费），可自由下载、安装和使用。
n8n Workflow Templates 支持哪些平台？
n8n Workflow Templates 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 n8n Workflow Templates？
由 yoder-bawt（@yoder-bawt）开发并维护，当前版本 v1.0.0。
推荐 Skills