← 返回 Skills 市场
124
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install xh-auto-workflow
功能描述
自动化工作流引擎。定时执行任务链：数据采集→处理→通知→存档。支持cron定时、 webhook触发、文件监控。
安全使用建议
Do not run this package or `npm install` in production or on a host with sensitive data yet. Key concerns: (1) workflow.js (the main executable) is missing from the bundle — ask the publisher for the source and review it before running; (2) the skill documents email/DB/API tasks but lists no required credentials — determine how secrets are supplied and ensure least-privilege credentials; (3) `npm install` will fetch third-party modules — consider auditing dependencies and running in an isolated container or sandbox; (4) if you need this functionality, request the complete repository or a published release (with homepage/source) and verify the code and configuration paths. Providing those artifacts (workflow.js, README on a public repo, declared env vars) would raise confidence and allow a re-evaluation.
功能分析
Type: OpenClaw Skill
Name: xh-auto-workflow
Version: 1.0.0
The skill bundle describes a standard automation workflow engine supporting cron tasks, file monitoring, and HTTP requests. The dependencies in package.json (node-cron, axios, nodemailer, chokidar) are appropriate for the stated functionality, and the SKILL.md documentation contains no malicious instructions or prompt injection attempts.
能力评估
Purpose & Capability
Name/description describe a workflow engine with HTTP, email, and database tasks. package.json lists main=workflow.js, but that file is not included. The skill declares no required env vars or credentials even though email/DB/API tasks normally require secrets — this is an internal inconsistency.
Instruction Scope
SKILL.md instructs running `npm install` and `node workflow.js --daemon/--run`, references workflow.json that reads/writes files, sends HTTP requests, and sends email. The instructions do not name required credential/env vars or specific paths to monitor, giving the runtime broad discretion and lacking the context needed to safely run these operations.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to run `npm install`. package.json lists common npm deps (node-cron, chokidar, axios, nodemailer) which are plausible for this app; npm install will download third-party packages from the public registry (moderate risk).
Credentials
The skill declares no required environment variables or primary credential, yet its documented tasks (SMTP/email, database, API calls, webhook callbacks) inherently require credentials/configuration. This mismatch could lead to unclear or ad-hoc credential handling if the code exists elsewhere.
Persistence & Privilege
The skill itself is not marked always:true, but SKILL.md encourages running `--daemon` with file monitoring and webhook triggers — running it will create a persistent process with filesystem and network access. That runtime persistence is expected for a scheduler but increases risk if the code and required secrets are not audited.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xh-auto-workflow - 安装完成后，直接呼叫该 Skill 的名称或使用
/xh-auto-workflow触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Auto Workflow Pro 1.0.0 introduces a powerful, flexible task automation engine.
- 支持可视化任务链编排，包括串行与并行流程、数据传递。
- 提供多样化任务触发方式：cron定时、webhook、文件监控、队列消息。
- 内置任务类型丰富，涵盖HTTP请求、数据转换、文件和数据库操作、邮件通知等。
- 便捷的命令行管理，包括执行、守护、状态查询等功能。
- 提供workflow.json示例及多场景应用模板，快速上手与扩展。
元数据
常见问题
自动化工作流引擎 是什么？
自动化工作流引擎。定时执行任务链：数据采集→处理→通知→存档。支持cron定时、 webhook触发、文件监控。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 124 次。
如何安装 自动化工作流引擎？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xh-auto-workflow」即可一键安装，无需额外配置。
自动化工作流引擎 是免费的吗？
是的，自动化工作流引擎 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
自动化工作流引擎 支持哪些平台？
自动化工作流引擎 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 自动化工作流引擎？
由 CJstate（@cjstate）开发并维护，当前版本 v1.0.0。
推荐 Skills