📦 Workflow Automator — 工作流自动执行
v2.0.6一句话描述任务即可让机器人自动完成 WhatsApp/Telegram 通知、Excel/CSV 表格处理、浏览器自动化及定时调度，零代码创建可复用工作流，提升效率。
1· 231·0 当前·0 累计
by 下载技能包
最后更新
2026/3/21
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to be what it says: a local workflow runner with browser automation and notifications. Before installing or activating scheduled workflows, consider these precautions:
- Review what OPENCLAW_MESSAGING will be able to do (which accounts/channels it can post to). Limit its scope or use a dedicated automation account if possible.
- Inspect ~/.openclaw/workflow-automator after first runs. Sessions/ chrome-profile directories contain cookies/localStorage which grant access to web ...详细分析 ▾
✓ 用途与能力
Name/description, required env vars (OPENCLAW_MESSAGING, OPENCLAW_BROWSER, OPENCLAW_CRON), required binaries, and the included scripts all align with a local workflow/scheduling/browser-automation tool that sends notifications. There are no unexplained credentials or unrelated binaries requested.
ℹ 指令范围
SKILL.md and the scripts describe decomposing user workflows, running steps (file, API, browser), and scheduling autonomous runs. The bundle frequently references reading/writing files under ~/.openclaw/workflow-automator, persistent browser profiles, and sending notifications. This is consistent with the feature set, but note the agent retains browser sessions (cookies/localStorage) and can run scheduled workflows without further interactive approval — behaviour that has real privacy/authorization implications (see persistence_privilege and environment_proportionality). The scripts include safety checks (blocking destructive patterns, detecting exfiltration/obfuscation) which constrain some risky actions.
✓ 安装机制
Instruction-only skill (no external download/install spec). The shipped files are plain shell scripts and README-like references. No network-download-from-arbitrary-URL install steps are present, so no high-risk install mechanism is used.
ℹ 凭证需求
Only three env vars are required and they map to the declared features. PRIMARY credential OPENCLAW_MESSAGING is reasonable for sending notifications across channels. However, the skill persists browser session data (cookies/localStorage) in ~/.openclaw/workflow-automator/sessions which can effectively grant ongoing access to web accounts; combined with messaging ability this increases the blast radius if those session files or the messaging credential are compromised. The scripts do not request unrelated cloud provider credentials or other secrets.
ℹ 持久化与权限
The skill stores schedules, run logs, screenshots, approvals, and browser profiles under the user's home (~/.openclaw/workflow-automator). It does not set always: true. Scheduled workflows run autonomously by design; the first run uses interactive approval but subsequent scheduled runs are autonomous. That autonomy + persistent browser sessions means scheduled runs can act using stored authenticated sessions without repeated user input — convenient but sensitive. The skill provides data-inventory and purge utilities to inspect and delete stored data.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.62026/3/20
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install openclaw-workflow-automator
镜像加速npx clawhub@latest install openclaw-workflow-automator --registry https://cn.longxiaskill.com