← 返回 Skills 市场
102
总下载
1
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install smart-agent-workflow
功能描述
AI Agent 工作方法论 Skill — 专注 3高(高质量+高效率+高节省)。提供任务类型判断、WBS 拆分、P0/P1 分级汇报、安全检查、Context 管理。渠道无关,适用于 Claude Code、Cursor、Codex、OpenClaw 等任何 AI agent。唯一提供完整工作方法论的 Skill。
安全使用建议
This skill appears to implement a coherent "agent workflow + memory" system, but it has two things you should check before installing or enabling it:
1) Prompt / policy injection: The SKILL.md recommends adding ~/smart-agent/AGENTS.md into an agent's system prompt (CLAUDE.md / Rules for AI). That gives the repository persistent control over agent behavior. Do NOT add it blindly — first read the AGENTS.md and related docs and decide if you trust these rules. Prefer adding rules to a sandboxed agent or enabling them only per-session rather than globally.
2) Local persistence & privacy: integrations/memory_manager.py writes history and memory files and will call an ai_client to compress/summarize conversations. Confirm (a) where those files will be stored, (b) whether they may contain secrets or PII, and (c) which AI client/endpoints will be used for compression (local-only vs remote). If you keep sensitive data in your agent environment, consider disabling automated compression or ensuring the ai_client is local and cannot send data to external services.
Additional practical steps:
- Inspect scripts (safe_write.sh, compress_hot.sh, archive_logs.sh, generate_report.sh) before running them. They operate on the local filesystem and are used by the skill.
- Avoid running curl | sh install commands from documentation unless you audit them (docs suggest running Ollama installer).
- If you want to limit risk, use the skill only as user-invoked (do not allow autonomous invocation to modify system prompts or write persistent files), or run it in an isolated/sandboxed agent account with no access to production secrets.
If you want, I can list the exact files/lines that cause the highest-risk behaviors (the AGENTS.md prompt-injection instruction, memory_manager's compress routine, and the docs' external-install commands) so you can review them line-by-line.
功能分析
Type: OpenClaw Skill
Name: smart-agent-workflow
Version: 1.2.0
The 'smart-agent-workflow' bundle is a comprehensive productivity framework designed to improve AI agent efficiency through structured task decomposition (WBS), memory management, and performance reporting. It contains standard shell scripts for log maintenance and a Python module for conversation summarization, all of which align with the stated purpose. Notably, the bundle includes explicit security instructions in AGENTS.md and SECURITY_CHECK.md that forbid the recording of sensitive data (keys/passwords) and mandate user confirmation for destructive or external operations, indicating a focus on safety and resource optimization.
能力评估
Purpose & Capability
Name/description (Smart Agent Workflow) align with the contents: extensive process docs, WBS/reporting templates, context management and scripts, and a memory_manager module. The code and scripts (compress, archive, safe write, metrics, memory manager) are coherent with a workflow/memory management skill.
Instruction Scope
SKILL.md explicitly instructs operators to add '读取 ~/smart-agent/AGENTS.md 并遵守所有规范' into agent system prompts (e.g., CLAUDE.md / Rules for AI). The repo also contains scripts that read/write local files and a memory_manager that saves history/memory and calls an ai_client to compress memory. These behaviors are within the declared purpose but grant the skill the ability to (a) inject long-running directives into an agent's system prompt (prompt-influence), (b) read and persist user context and preferences locally (which may include sensitive info if present), and (c) run background compression using an ai_client. The SKILL.md is not malicious on its face, but the instruction to modify a system prompt is a high-impact action and can be abused; verify what you allow the agent to load and persist.
Install Mechanism
There is no install spec (instruction-only), which keeps risk lower. The included docs show optional external install commands (e.g., curl | sh for Ollama in docs) and recommend cloning a GitHub repo; these are user-run actions (not automatic), but executing external install scripts has general supply-chain risk and should be audited before running.
Credentials
The skill declares no required env vars or credentials, which matches its documentation. Some docs show optional environment variables (TELEGRAM_BOT_TOKEN, OLLAMA_* ) for optional integrations, but those are not required by the skill itself. The memory manager will persist local files under the storage directory it is given — no cloud credentials are requested by the package, so requested privileges are proportional to the stated functionality; still review whether stored memory could contain secrets.
Persistence & Privilege
always:false and no special platform-wide privileges are requested. The skill expects to persist and manage local files (memory/hot.md, logs, metrics, reports) and to run helper scripts (safe_write.sh, compress_hot.sh). Persisting agent policy material into an agent's system prompt (via asking you to add AGENTS.md to CLAUDE.md) is powerful: it gives the skill long-term influence over agent behavior. This is consistent with its purpose but raises the blast radius if the content contains unsafe instructions or if the memory stores sensitive data.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install smart-agent-workflow - 安装完成后,直接呼叫该 Skill 的名称或使用
/smart-agent-workflow触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.0
增加 DO NOT 列表和 Credit Burn Loop 防护,防止 Token 浪费和低效行为
v1.1.0
强化 3高定位(高质量+高效率+高节省),增加推荐组合(最小/标准/完整),增加竞品对比,精简 SKILL.md
v1.0.0
AI Agent 工作方法论 Skill,提供完整的工作流程规范
元数据
常见问题
Smart Agent Workflow 是什么?
AI Agent 工作方法论 Skill — 专注 3高(高质量+高效率+高节省)。提供任务类型判断、WBS 拆分、P0/P1 分级汇报、安全检查、Context 管理。渠道无关,适用于 Claude Code、Cursor、Codex、OpenClaw 等任何 AI agent。唯一提供完整工作方法论的 Skill。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 102 次。
如何安装 Smart Agent Workflow?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install smart-agent-workflow」即可一键安装,无需额外配置。
Smart Agent Workflow 是免费的吗?
是的,Smart Agent Workflow 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Smart Agent Workflow 支持哪些平台?
Smart Agent Workflow 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Smart Agent Workflow?
由 Mark(@whhaijun)开发并维护,当前版本 v1.2.0。
推荐 Skills