← 返回 Skills 市场
OpenClaw n8n Orchestrator
作者
Kristopher Dunham
· GitHub ↗
· v2.0.0
· MIT-0
354
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-n8n-orchestrator
功能描述
When the user wants to connect an OpenClaw agent to n8n workflows, create n8n webhook skills for OpenClaw, route agent API calls through n8n for credential i...
安全使用建议
This skill appears to do what it says: it helps you build OpenClaw skills that call n8n webhooks and configures bidirectional flows. Before installing or using it, consider: 1) Trust: you must trust your n8n instance and any integrations it holds, because the orchestrator routes agent data there. 2) Secrets handling: do not include .env or API keys in published skill archives or Git history; generated skills will require N8N_WEBHOOK_URL, N8N_WEBHOOK_SECRET, and OPENCLAW_GATEWAY_TOKEN — keep those in a secure vault. 3) Gateway exposure: follow the docs to keep the OpenClaw Gateway bound to localhost or tunnel it (SSH/WireGuard/Cloudflared) rather than exposing it publicly. 4) Validate generated skills: run the included validate_integration.py and inspect generated SKILL.md/scripts before publishing to ClawHub. 5) Be cautious with remote install commands referenced in docs (e.g., curl | bash) — verify sources before running. If you want extra assurance, request a brief review of any generated skill directory (SKILL.md + scripts) before publishing or deploying.
功能分析
Type: OpenClaw Skill
Name: openclaw-n8n-orchestrator
Version: 2.0.0
The bundle is a comprehensive security-focused framework for integrating OpenClaw agents with n8n workflows. It provides templates and instructions for implementing a 'proxy orchestration pattern' designed to isolate sensitive API credentials within n8n, preventing leakage from the agent's environment. The included scripts, such as 'validate_integration.py' and the trigger templates (trigger-template.sh/js), incorporate robust security practices including input sanitization via URL encoding, strict error handling (set -euo pipefail), and mandatory security manifests. The documentation (references/security.md) provides high-quality threat modeling and hardening guidance, demonstrating a clear intent to improve system security rather than exploit it.
能力评估
Purpose & Capability
The name/description describe routing OpenClaw calls through n8n and generating skill directories; the repository contains templates, trigger scripts, validator, and deployment docs that match that purpose. The orchestrator itself declares no required env vars in registry metadata (reasonable because it generates skill templates that will declare their own env requirements).
Instruction Scope
SKILL.md and templates limit actions to generating SKILL.md, scripts, webhook triggers, and deployment guidance. The instructions explicitly document which endpoints and environment variables are used (n8n webhook URL/secret, Gateway endpoints) and include mandatory transparency sections; they do not instruct reading unrelated host files or exfiltrating secrets beyond the stated webhook/ gateway flows.
Install Mechanism
There is no install spec; this is instruction-plus-template code only. Bundled files are local templates and a validator script—no remote download/install of arbitrary code. Note: documentation references common install commands (e.g., curl | bash for OpenClaw) for external projects; that's a user action outside this skill and should be handled with usual caution.
Credentials
The skill package itself declares no required env vars, but the generated skill templates and provided scripts clearly expect N8N_WEBHOOK_URL, N8N_WEBHOOK_SECRET, and the OpenClaw gateway token when used. This is proportionate to the stated proxy/orchestration purpose, but users should be aware that generated skills will require those credentials and that they must not be included in packaged archives or repository history.
Persistence & Privilege
always:false and default model-invocation settings are used. The skill does not request permanent presence or try to modify other skills or system-wide settings. It does recommend removing generated skill dirs to disable autonomous invocation, which is a reasonable operational note.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-n8n-orchestrator - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-n8n-orchestrator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.0
v2.0.0 — Complete architectural rewrite
- Generates proper OpenClaw skill directories (SKILL.md + YAML frontmatter) instead of legacy .mmd files
- YAML frontmatter uses correct metadata.clawdbot namespace, requires.env singular, files declarations
- Security Manifest Headers in all scripts (ClawHub scanner compliance)
- Shell injection mitigation: urllib.parse.quote sanitization, --data-urlencode, Node.js zero-injection templates
- set -euo pipefail enforced in all bash scripts
- Four mandatory transparency sections: External Endpoints, Security & Privacy, Model Invocation Note, Trust Statement
- New Mode 5: ClawHub publishing pipeline with clawhub CLI workflow
- SkillPointer pattern for scaling 20+ webhook skills (8,000 → 200 startup tokens)
- exec.approval and soul.md guardrail templates
- Node.js trigger template (zero npm dependencies, zero shell surface)
- Expanded validation script: checks YAML, manifests, injection patterns, dangerous files
- Multi-model cost routing guidance (~70% API savings)
元数据
常见问题
OpenClaw n8n Orchestrator 是什么？
When the user wants to connect an OpenClaw agent to n8n workflows, create n8n webhook skills for OpenClaw, route agent API calls through n8n for credential i... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 354 次。
如何安装 OpenClaw n8n Orchestrator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-n8n-orchestrator」即可一键安装，无需额外配置。
OpenClaw n8n Orchestrator 是免费的吗？
是的，OpenClaw n8n Orchestrator 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
OpenClaw n8n Orchestrator 支持哪些平台？
OpenClaw n8n Orchestrator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenClaw n8n Orchestrator？
由 Kristopher Dunham（@ktopper）开发并维护，当前版本 v2.0.0。
推荐 Skills