by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it claims, but take these precautions before installing or using it:
- Review any saved workflow file in memory/workflows/ before running — approved workflows can trigger API calls and agent actions without additional confirmation.
- Be cautious embedding secrets or credentials in workflow steps or API-call parameters; prefer using secure connectors or prompts.
- For workflows that interact with external systems, test in a safe environment first.
- If you want extra...详细分析 ▾
✓ 用途与能力
The name/description match the SKILL.md: it builds, persists, and executes multi-step workflows including API calls, agent actions, and shell/file steps. The skill declares no environment variables, binaries, or installs — which is reasonable for an instruction-only orchestration tool.
ℹ 指令范围
Instructions are explicit about saving workflows to memory/workflows/{name}.md, auto-creating that directory, and executing steps. Shell commands and file writes require per-step confirmation, but API calls and agent actions are allowed to run without per-step confirmation once the workflow itself is approved — this is coherent for automation but means approved workflows may trigger external requests or agent-side actions without additional prompts.
✓ 安装机制
There is no install spec and no code files; this is the lowest-risk model for static analysis (nothing is written to disk by an installer).
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. That matches the described functionality (it relies on the agent's existing tools rather than external secrets).
ℹ 持久化与权限
The skill persists workflows under memory/workflows/ and will auto-create that directory. always:false and no global config changes are requested. The SKILL.md asserts it won't modify other skill files, but as an instruction-only skill this is a behavioral guideline rather than an enforceable constraint.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.02026/3/29
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install workflow-builder-lite
镜像加速npx clawhub@latest install workflow-builder-lite --registry https://cn.longxiaskill.com