工作流编排

This skill appears to implement a legitimate workflow orchestrator, but you should not install it into a production agent without a few checks: 1) Inspect the complete index.ts (search for use of eval, new Function, vm, template engines, child_process, fetch/http requests, or any direct filesystem/network calls). If condition evaluation or template substitution uses eval/new Function, request that the author replace it with a safe evaluator or whitelist variables and operations. 2) Confirm the orchestrator enforces an allowlist of skills/actions it may call (don’t let workflows invoke arbitrary sensitive skills like credential managers or deployers). 3) Run it in a sandboxed agent or test environment first and exercise workflows with controlled inputs. 4) If you cannot review the full code, treat this as higher-risk and avoid granting it access to agents that can perform sensitive operations. If you want, provide the full (untruncated) index.ts and I can look specifically for eval/unsafe template patterns and other risky APIs.