Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Bytesagain Workflow Builder

v1.0.3

Create and run multi-step shell workflows with status tracking. Use when automating deployment sequences, chaining build steps, running CI pipelines locally,...

0· 113·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for loutai0307-prog/bytesagain-workflow-builder.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Bytesagain Workflow Builder" (loutai0307-prog/bytesagain-workflow-builder) from ClawHub.
Skill page: https://clawhub.ai/loutai0307-prog/bytesagain-workflow-builder
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install bytesagain-workflow-builder

ClawHub CLI

Package manager switcher

npx clawhub@latest install bytesagain-workflow-builder
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (multi-step shell workflows) aligns with the included script: it creates, stores, lists, runs, and exports workflows saved under $HOME/.bytesagain-workflows. Declared requirements (bash, python3) are consistent with the implementation.
Instruction Scope
SKILL.md documents a CLI (bytesagain-workflow-builder) and usage that matches script behavior. However, there is no install spec that places the script on PATH — the repo includes scripts/script.sh which implements the CLI, but the SKILL instructs use of a command name without describing installation. The runtime instructions and the script do not access unrelated files, credentials, or external endpoints.
Install Mechanism
No install spec (instruction-only) — lowest-risk model. The repository includes a script file but there is no download-from-URL or package install step. No archives or external installers were used.
Credentials
The skill requests no environment variables or credentials. The script writes to a per-user directory ($HOME/.bytesagain-workflows) which is proportionate to its function. There are no unexpected credential names or config paths requested.
Persistence & Privilege
always:false and no special privileges requested. The skill persists only per-user workflow JSON under $HOME and does not modify other skills or system-wide configuration.
Assessment
This skill appears coherent and implements a local workflow runner that executes whatever shell commands you add. Important things to consider before installing/using: (1) The included script stores workflow JSON in $HOME/.bytesagain-workflows and logs up to ~200 characters of each step's stdout/stderr — don't add commands that print secrets you don't want persisted. (2) Steps are executed via the shell (subprocess.run with shell=True) so only add trusted commands; malicious or poorly written commands can modify your system or exfiltrate data. (3) There is no install spec to put a 'bytesagain-workflow-builder' binary on your PATH — you may need to inspect scripts/script.sh and decide how to install or invoke it safely (e.g., review the script, place it in a controlled path, or run it explicitly). (4) Sample templates include actions like rsync, docker push, and kubectl which can interact with remote systems — review credentials/targets before running. If you want higher assurance, review the script source locally, run commands in a sandbox/container, or add stricter output handling and step timeouts.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f6wyvrvj29qxx7kzad5dkwh83tb42
113downloads
0stars
4versions
Updated 1mo ago
v1.0.3
MIT-0

bytesagain-workflow-builder

Build, run, and track multi-step workflows from the terminal. Define pipeline steps with shell commands, execute them in sequence, and monitor status with detailed progress tracking.

Usage

bytesagain-workflow-builder create "<name>"
bytesagain-workflow-builder add-step <id> "<step_name>" "<command>"
bytesagain-workflow-builder run <id>
bytesagain-workflow-builder status <id>
bytesagain-workflow-builder list
bytesagain-workflow-builder export <id>
bytesagain-workflow-builder template <type>

Commands

  • create — Create a new named workflow and get its ID
  • add-step — Add a shell command step to a workflow
  • run — Execute all steps in sequence, stopping on failure
  • status — Show per-step execution status and output
  • list — List all workflows with step counts and last run time
  • export — Export workflow definition as JSON
  • template — Show starter templates (ci, deploy)

Examples

bytesagain-workflow-builder create "Release Pipeline"
bytesagain-workflow-builder add-step wf001 "Run Tests" "npm test"
bytesagain-workflow-builder add-step wf001 "Build" "npm run build"
bytesagain-workflow-builder add-step wf001 "Deploy" "rsync -av dist/ server:/var/www/"
bytesagain-workflow-builder run wf001
bytesagain-workflow-builder status wf001

Requirements

  • bash
  • python3

When to Use

Use when automating multi-step processes, building CI-like pipelines locally, tracking deployment steps, or managing repeatable task sequences with clear pass/fail status.

Comments

Loading comments...