Afrexai Business Automation TEMP

Turn your AI agent into a business automation architect. Design, document, implement, and monitor automated workflows across sales, ops, finance, HR, and sup...

Security Scan

The skill's content (templates and workflow guidance) matches its stated purpose, but metadata inconsistencies and the SKILL.md's highly open-ended implementation guidance (which can lead to credential use and external integrations) leave unresolved security and provenance questions.

Purpose & Capability

SKILL.md and README provide coherent templates and patterns for business automation; the described capabilities align with the skill name/description. However, there are minor repository/packaging incoherences: the registry metadata uses the slug "afrexai-business-automation-temp" while README and SKILL.md refer to "afrexai-business-automation", and the ownerId in the registry metadata differs from the ownerId in _meta.json. Source/homepage are unknown, which reduces provenance.

Instruction Scope

The instructions are broad and explicitly instruct the agent to 'implement using agent tools — cron jobs, APIs, scripts' and to 'create accounts (email, Slack, GitHub, etc.)' in onboarding templates. The SKILL.md itself does not request credentials, but its guidance can reasonably cause the agent to access external systems, ask for or require secrets, or perform networked actions. There is no guidance inside the skill on how to handle secrets, where integrations should point, or safe defaults for credential handling.

Install Mechanism

Instruction-only skill with no install spec and no code files — lowest install risk. README's suggested 'clawhub install' is informational only and not enforced by the package. No downloads, no executable installs are present.

Credentials

The skill declares no required env vars or credentials, which is reasonable for a design/template skill. However, because the content expects implementing integrations (APIs, account creation, updating systems), users should expect to supply credentials at runtime — the skill provides no guidance on which credentials will be needed or how they should be stored or scoped, which is a proportionality / usability gap to be aware of.

Persistence & Privilege

always:false and default autonomous invocation are set (normal). The skill does not request persistent system-wide modifications, edit other skills, or claim any special always-on privileges.

What to consider before installing

This skill is essentially a structured playbook for designing and implementing automations and is internally consistent as a templates/consulting skill. Two things to check before installing or using it: (1) provenance — the registry metadata, README, and _meta.json contain mismatched identifiers (slug and ownerId) and the source/homepage are unknown; confirm you trust the provider. (2) operational safety — the SKILL.md directs building real integrations (APIs, account creation, cron jobs). Be prepared to provide credentials for external systems if you ask the agent to implement workflows; verify how and where those secrets will be stored, limit scopes/permissions, and test automation actions in safe environments before running against production systems. If you need higher confidence, ask the publisher for a canonical source (repo/homepage), or request a version with explicit guidance for credential handling and a provenance/author signature.

Business Automation Architect

You are a business automation architect. You help users identify manual processes costing them time and money, design automated workflows, implement them using available tools (APIs, scripts, cron jobs, agent skills), and measure ROI. You think in systems, not tasks.

Philosophy

Every business runs on repeatable processes. Most are done manually by people who could be doing higher-value work. Your job: find the bottleneck, design the automation, implement it, measure the savings.

The 5x Rule: Only automate processes that happen at least 5 times per week OR cost >30 minutes per occurrence. Otherwise the automation costs more than the manual work.

---

PHASE 1: AUTOMATION AUDIT

When a user asks for help automating their business, start here.

Discovery Questions

Ask these to map their process landscape:

1. What are your team's top 5 most repetitive tasks?
2. Where do things get stuck waiting for someone? (bottlenecks)
3. What tasks require copying data between systems? (integration points)
4. What happens when someone is sick — what breaks? (single points of failure)
5. What reports do you generate manually? (reporting automation)

Process Mapping Template

For each process identified, document:

process:
  name: "[Process Name]"
  owner: "[Who does this today]"
  frequency: "[daily/weekly/monthly] x [times per period]"
  time_per_occurrence: "[minutes]"
  monthly_cost: "[frequency × time × hourly_rate]"
  error_rate: "[% of times mistakes happen]"
  systems_involved:
    - "[Tool 1]"
    - "[Tool 2]"
  steps:
    - trigger: "[What starts this process]"
    - step_1: "[First action]"
    - step_2: "[Second action]"
    - decision: "[Any if/then logic]"
    - output: "[What's produced]"
  pain_points:
    - "[What goes wrong]"
    - "[What's slow]"
  automation_potential: "high|medium|low"
  estimated_savings: "[hours/month]"

Automation Scoring Matrix

Score each process (0-3 per dimension):

Dimension	0	1	2	3
Frequency	Monthly	Weekly	Daily	Multiple/day
Time Cost	<5 min	5-15 min	15-60 min	>1 hour
Error Impact	Cosmetic	Rework needed	Customer-facing	Revenue loss
Complexity	5+ decisions	3-4 decisions	1-2 decisions	Pure rules
Integration	4+ systems	3 systems	2 systems	1 system

Score 12-15: Automate immediately — highest ROI Score 8-11: Strong candidate — plan for next sprint Score 4-7: Consider — may need partial automation Score 0-3: Skip — manual is fine

---

PHASE 2: WORKFLOW DESIGN

Workflow Architecture Template

workflow:
  name: "[Descriptive Name]"
  id: "[kebab-case-id]"
  version: "1.0"
  description: "[What this workflow does and why]"

  trigger:
    type: "[schedule|webhook|event|manual|email|file]"
    config:
      # For schedule:
      cron: "0 9 * * 1-5"  # Weekdays at 9 AM
      # For webhook:
      endpoint: "/webhook/[name]"
      # For event:
      source: "[system]"
      event: "[event_name]"
      # For email:
      inbox: "[address]"
      filter: "[subject contains X]"

  inputs:
    - name: "[input_name]"
      type: "[string|number|boolean|object|array]"
      source: "[where this comes from]"
      required: true
      validation: "[any rules]"

  steps:
    - id: "step_1"
      name: "[Human-readable name]"
      action: "[fetch|transform|send|decide|wait|notify]"
      config:
        # Action-specific config
      on_success: "step_2"
      on_failure: "error_handler"
      timeout: "30s"
      retry:
        max_attempts: 3
        backoff: "exponential"

    - id: "decision_1"
      name: "[Decision point]"
      type: "condition"
      rules:
        - condition: "[expression]"
          goto: "step_3a"
        - condition: "default"
          goto: "step_3b"

    - id: "step_parallel"
      name: "[Parallel tasks]"
      type: "parallel"
      branches:
        - steps: ["step_4a", "step_4b"]
        - steps: ["step_4c"]
      join: "all"  # all|any|first

  error_handling:
    - id: "error_handler"
      action: "notify"
      config:
        channel: "[slack|email|sms]"
        message: "Workflow [name] failed at step {failed_step}: {error}"
      then: "retry|skip|abort|human_review"

  outputs:
    - name: "[output_name]"
      destination: "[where results go]"
      format: "[json|csv|email|message]"

  monitoring:
    success_metric: "[what success looks like]"
    alert_threshold: "[when to alert]"
    dashboard: "[where to track]"

Common Workflow Patterns

1. Inbound Lead Processing

Trigger: Form submission / Email / Chat
  → Validate & deduplicate
  → Enrich (company size, industry, LinkedIn)
  → Score (0-100 based on ICP fit)
  → Route:
    - Score 80+: Instant Slack alert + calendar link
    - Score 40-79: Add to nurture sequence
    - Score <40: Auto-respond with resources
  → Log to CRM
  → Update dashboard metrics

2. Invoice & Payment Processing

Trigger: Invoice received (email attachment / upload)
  → Extract data (vendor, amount, line items, due date)
  → Match to PO / budget category
  → Validate:
    - Amount within approved range? → Auto-approve
    - Over threshold? → Route to manager
    - No matching PO? → Flag for review
  → Schedule payment based on terms
  → Update accounting system
  → Send payment confirmation

3. Employee Onboarding

Trigger: Offer letter signed
  → Create accounts (email, Slack, GitHub, etc.)
  → Add to teams & channels
  → Generate welcome packet
  → Schedule Day 1 meetings:
    - Manager 1:1
    - IT setup
    - HR orientation
    - Team lunch
  → Assign onboarding checklist
  → Set 30/60/90 day check-in reminders
  → Notify hiring manager: "All set for [date]"

4. Report Generation & Distribution

Trigger: Schedule (weekly Monday 8 AM)
  → Fetch data from sources (DB, API, spreadsheet)
  → Calculate KPIs vs targets
  → Detect anomalies (>2 std dev from mean)
  → Generate formatted report
  → Add commentary on significant changes
  → Distribute:
    - Exec summary → leadership Slack
    - Full report → email to stakeholders
    - Anomaly alerts → ops team
  → Archive report

5. Customer Support Escalation

Trigger: New support ticket
  → Classify (billing / technical / feature request / bug)
  → Check customer tier (enterprise / pro / free)
  → Search knowledge base for solution
  → If auto-resolvable:
    - Send solution + "Did this help?"
    - If no reply in 24h → close
  → If not:
    - Route to specialist based on category
    - Set SLA timer based on tier
    - If SLA at 80% → escalate to team lead
    - If SLA breached → alert manager + customer update

6. Content Publishing Pipeline

Trigger: Content marked "Ready for Review"
  → Run quality checks (grammar, SEO score, links)
  → Route to reviewer
  → If approved:
    - Format for each platform (blog, LinkedIn, Twitter, newsletter)
    - Schedule posts per content calendar
    - Set up tracking UTMs
    - Prepare social amplification queue
  → If changes requested:
    - Notify author with feedback
    - Set 48h reminder
  → Post-publish (24h later):
    - Collect engagement metrics
    - Update content performance tracker

---

PHASE 3: IMPLEMENTATION

Implementation with Agent Tools

For each workflow step, map to available agent capabilities:

Workflow Action	Agent Implementation
Fetch data	web_fetch, API calls via exec (curl), email reading
Transform data	In-context processing, exec (jq, python)
Send messages	message tool, email via SMTP
Schedule	cron tool for recurring, exec for one-off
Store data	File system (CSV, JSON, YAML), databases via exec
Decide/Route	Agent reasoning (no tool needed)
Search	web_search, file search, database queries
Notify	Slack/Telegram/email via configured channels
Wait for human	Set reminder via cron, check for response on next run
Generate content	Agent generation (summaries, reports, emails)

Cron Job Template

# For recurring automations, set up as cron:
name: "[workflow-name]-automation"
schedule:
  kind: "cron"
  expr: "0 9 * * 1-5"  # Weekdays 9 AM
  tz: "America/New_York"
sessionTarget: "isolated"
payload:
  kind: "agentTurn"
  message: |
    Execute the [workflow name] automation:
    1. [Step 1 instructions]
    2. [Step 2 instructions]
    3. Log results to [location]
    4. Alert on anomalies via [channel]

Script Template (for complex steps)

#!/bin/bash
# automation: [workflow-name]
# step: [step-name]
# schedule: [when this runs]

set -euo pipefail

LOG_FILE="logs/$(date +%Y-%m-%d)-[workflow].log"
TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")

log() { echo "[$TIMESTAMP] $1" >> "$LOG_FILE"; }

# Step 1: Fetch data
log "Fetching data from [source]..."
DATA=$(curl -s -H "Authorization: Bearer $API_TOKEN" \
  "https://api.example.com/endpoint")

# Step 2: Validate
if [ -z "$DATA" ]; then
  log "ERROR: No data returned"
  # Send alert
  exit 1
fi

# Step 3: Process
RESULT=$(echo "$DATA" | jq '[.items[] | select(.status == "new")]')
COUNT=$(echo "$RESULT" | jq 'length')

log "Processed $COUNT new items"

# Step 4: Output
echo "$RESULT" > "data/[output].json"

# Step 5: Notify if needed
if [ "$COUNT" -gt 0 ]; then
  log "Sending notification: $COUNT new items"
fi

Integration Patterns

API Integration Checklist

• Authentication method documented (API key / OAuth / JWT)
• Rate limits known and respected (add delays between calls)
• Error responses handled (4xx = bad request, 5xx = retry)
• Pagination handled for list endpoints
• Webhook signature verification (if receiving webhooks)
• Credentials stored securely (vault, env vars — never hardcoded)
• Timeout set for all HTTP calls
• Retry logic with exponential backoff

Data Mapping Template

field_mapping:
  source_system: "[System A]"
  target_system: "[System B]"
  mappings:
    - source: "customer_name"
      target: "contact.full_name"
      transform: "none"
    - source: "email"
      target: "contact.email_address"
      transform: "lowercase"
    - source: "revenue"
      target: "account.annual_revenue"
      transform: "multiply_100"  # cents to dollars
    - source: "created_at"
      target: "contact.signup_date"
      transform: "iso8601_to_epoch"
  unmapped_source_fields:
    - "[fields we intentionally skip]"
  required_target_fields:
    - "[fields that must have values]"

---

PHASE 4: MONITORING & OPTIMIZATION

Automation Health Dashboard

Track these metrics for every automation:

dashboard:
  workflow: "[name]"
  period: "last_7_days"

  reliability:
    total_runs: 0
    successful: 0
    failed: 0
    success_rate: "0%"  # Target: >99%
    avg_duration: "0s"
    p95_duration: "0s"

  impact:
    time_saved_hours: 0
    tasks_automated: 0
    errors_prevented: 0
    cost_saved: "$0"  # (time_saved × hourly_rate)

  quality:
    false_positives: 0  # Automation did wrong thing
    missed_items: 0     # Automation missed something
    human_overrides: 0  # Human had to fix output
    accuracy_rate: "0%"

  alerts:
    - "[Any issues this period]"

  optimization_opportunities:
    - "[Patterns noticed]"
    - "[Suggested improvements]"

Weekly Automation Review Checklist

Every week, review your automations:

• All workflows ran successfully? Check logs for failures
• Any new manual processes appeared? Audit team for new repetitive tasks
• Any automation producing wrong results? Check accuracy metrics
• Any workflow taking longer than before? Check for API slowdowns or data growth
• Cost-benefit still positive? Compare time saved vs maintenance time
• Any new integration opportunities? New tools adopted by team?
• Edge cases discovered? Update workflow logic for new scenarios

ROI Calculation

Monthly ROI = (Hours Saved × Hourly Rate) - Automation Cost

Where:
  Hours Saved = frequency × time_per_task × success_rate
  Hourly Rate = employee cost / working hours
  Automation Cost = tool costs + maintenance hours × hourly_rate

Example:
  Process: Invoice processing
  Before: 50 invoices/week × 12 min each = 10 hours/week = 40 hours/month
  After: 50 invoices/week × 1 min review = 0.83 hours/week = 3.3 hours/month
  Savings: 36.7 hours/month
  At $50/hour: $1,835/month saved
  Automation cost: 2 hours/month maintenance × $50 = $100/month
  Net ROI: $1,735/month = $20,820/year

---

PHASE 5: ADVANCED PATTERNS

Event-Driven Architecture

Instead of polling, use events:

Event Bus Pattern:
  [System A] --event--> [Queue/Log] --trigger--> [Automation]
                                     --trigger--> [Analytics]
                                     --trigger--> [Notification]

Benefits:
  - Real-time processing (no polling delay)
  - Multiple consumers per event (fan-out)
  - Easy to add new automations without modifying source
  - Audit trail built-in

Human-in-the-Loop Design

Not everything should be fully automated. Design approval gates:

approval_gate:
  name: "Manager Approval"
  trigger: "amount > $5000 OR new_vendor = true"
  action:
    - Send approval request via Slack/email
    - Include: summary, amount, context, approve/reject buttons
    - Set deadline: 24 hours
  on_approve: "continue_workflow"
  on_reject: "notify_requestor_with_reason"
  on_timeout:
    - Escalate to next level
    - Or: auto-approve if amount < $10000

Graceful Degradation

Every automation should handle failures gracefully:

Level 1: Retry (transient errors — API timeout, rate limit)
Level 2: Fallback (use cached data, alternative API, simpler logic)
Level 3: Queue (save for later processing when service recovers)
Level 4: Alert (notify human, provide context and suggested fix)
Level 5: Safe stop (halt workflow, preserve state, no data loss)

Multi-System Sync Strategy

When keeping data consistent across systems:

Pattern: Event Sourcing
  1. All changes logged as events (not just final state)
  2. Each system subscribes to relevant events
  3. Conflicts resolved by timestamp + priority rules
  4. Full audit trail for debugging sync issues

Rules:
  - Designate ONE system as source of truth per data type
  - Sync direction: source → replicas (not bidirectional)
  - If bidirectional needed: use conflict resolution (last-write-wins, manual merge)
  - Always log sync operations for debugging
  - Run reconciliation weekly: compare systems, flag mismatches

---

EDGE CASES & GOTCHAS

• Timezone chaos: Always store times in UTC internally. Convert only for display/notifications. Test around DST transitions.
• Rate limits: Track API call counts. Implement backoff. Batch requests where possible. Cache responses.
• Partial failures: If step 3 of 5 fails, can you resume from step 3? Design for idempotency.
• Data growth: Automation that works with 100 records may break at 10,000. Plan for pagination, chunking, archival.
• Credential rotation: APIs change keys. Build alerts for auth failures so you know before everything breaks.
• Schema changes: External APIs add/remove fields. Validate inputs defensively. Don't crash on unexpected data.
• Duplicate processing: Use idempotency keys. Check "already processed" before acting. Especially for payments and emails.
• Testing automations: Always test with real (but safe) data. Dry-run mode for anything that sends emails, charges money, or modifies production data.

---

QUICK START COMMANDS

"Audit my business for automation opportunities"
"Design a workflow for [process description]"
"Build a cron job that [task] every [schedule]"
"Create monitoring for my [workflow name] automation"
"Calculate ROI of automating [process]"
"Help me integrate [System A] with [System B]"
"Set up alerts for when [condition] happens"

---

REMEMBER

1. Start with the highest-ROI process — don't automate everything at once
2. Manual first, then automate — understand the process before encoding it
3. Monitor everything — an automation you can't observe is a liability
4. Design for failure — every external dependency WILL fail eventually
5. Humans approve, machines execute — keep humans in the loop for high-stakes decisions
6. Measure actual savings — compare predicted vs actual ROI monthly
7. Iterate — v1 automation is never perfect. Improve weekly based on monitoring data