← 返回 Skills 市场
271
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install process-flow-navigator
功能描述
业务流程图导航助手 - 帮助你在复杂的多分支流程中导航、规划路径、查询技能编码。支持 A→K 主流程及所有子流程分支。
安全使用建议
This skill appears coherent and local-only, but exercise the usual caution: (1) the CLI script uses python3 though the metadata lists no required binaries — ensure python3 is available or adapt the script before use; (2) the source/homepage are unknown, so review data/flow-rules.json to confirm the flow matches your expectations and contains no sensitive information you wouldn't want stored in a skill; (3) run the script in a sandbox or non-production environment first if you have any doubts; (4) because the skill is user-invocable and can be invoked by the agent autonomously (normal default), only enable it if you trust the owner or have inspected the files — there is no evidence of network calls or credential access in the package.
功能分析
Type: OpenClaw Skill
Name: process-flow-navigator
Version: 1.0.0
The skill bundle contains a command injection vulnerability in `scripts/navigate.sh`. The `get_node_code` function interpolates the `$node` shell variable directly into a `python3 -c` command string without sanitization, which could allow an attacker to execute arbitrary Python code. While the logic in `SKILL.md`, `README.md`, and `data/flow-rules.json` appears aligned with the stated purpose of business process navigation, the presence of this high-risk vulnerability requires a suspicious classification.
能力评估
Purpose & Capability
The skill's name/description (process flow navigation) match the included files: a JSON flow-rules data file, SKILL.md, README, and a CLI script that answers navigation queries. One minor inconsistency: the SKILL.md/registry metadata declare no required binaries, but scripts/navigate.sh invokes python3 for the 'code' command. That is a small metadata mismatch (the script legitimately needs python3 to print node codes) but does not indicate malicious behavior.
Instruction Scope
SKILL.md describes navigation, path planning, and code lookup only. The runtime script reads only the included data/flow-rules.json and prints results; it does not reference arbitrary user files, system configuration, or network endpoints. The SKILL.md notes the source was a user-provided PDF, but there is no code that tries to parse user PDFs or automatically ingest user files, so there is no scope creep.
Install Mechanism
No install spec is present (instruction-only plus a local script); nothing is downloaded at install time. README suggests git clone or clawhub install but there are no remote installers or external archives referenced, so no high-risk install behavior is present.
Credentials
The skill declares no environment variables, no credentials, and none of the files attempt to read environment secrets. All data used is in the included data/flow-rules.json; there is no disproportionate credential request.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or modify other skills. It is a normal, non-persistent helper with no special privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install process-flow-navigator - 安装完成后，直接呼叫该 Skill 的名称或使用
/process-flow-navigator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Process Flow Navigator v1.0.0
- 首发上线，提供完整 A→K 主流程与所有子流程分支的导航支持
- 实现多节点路径规划与分支结构可视化
- 支持流程节点的校验/执行/判定技能编码查询
- 提供示例问题，便于快速上手
元数据
常见问题
Process Flow Navigator 是什么？
业务流程图导航助手 - 帮助你在复杂的多分支流程中导航、规划路径、查询技能编码。支持 A→K 主流程及所有子流程分支。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 271 次。
如何安装 Process Flow Navigator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install process-flow-navigator」即可一键安装，无需额外配置。
Process Flow Navigator 是免费的吗？
是的，Process Flow Navigator 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Process Flow Navigator 支持哪些平台？
Process Flow Navigator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Process Flow Navigator？
由 JopYin（@jopyin）开发并维护，当前版本 v1.0.0。
推荐 Skills