workflow-automation

Automate workflows

Security Scan

The skill's instructions reference a local Python script and an API key that are not declared or included, which is incoherent and could indicate an incomplete or unsafe package.

Purpose & Capability

The name/description ('Automate workflows') is generic and plausible, but the SKILL.md expects a local script (python3 scripts/workflow_automation.py) and an AUTOMATION_API_KEY without providing that script or declaring the env var in the registry metadata. The claimed capability doesn't justify the missing artifacts or the undeclared credential.

Instruction Scope

Runtime instructions tell the agent to run a specific local Python script and to set AUTOMATION_API_KEY. No code files or scripts are bundled with the skill, and requires.env lists none. This is a direct mismatch: the instructions cannot be executed as-is and they implicitly ask the agent to rely on external local files or user-provided secrets.

Install Mechanism

No install spec and no code files — this lowers the risk of arbitrary code being installed by the skill itself, but also means the SKILL.md is effectively documentation-only that references missing artifacts. The lack of an install path makes the missing script/requirements more suspicious (packaging error or deliberate omission).

Credentials

SKILL.md instructs users to export AUTOMATION_API_KEY, but the registry metadata lists no required environment variables or primary credential. Requesting an API key in the instructions without declaring it is disproportionate and opaque: the skill gives no information about what service the key is for, scope required, or where it will be sent.

Persistence & Privilege

Skill has default privileges (always: false, agent invocation allowed). There is no indication it requests elevated persistence or modifies other skills or system settings.

What to consider before installing

Do not provide secrets or run arbitrary scripts based on this SKILL.md. The skill references a local Python script (scripts/workflow_automation.py) that isn’t included and asks you to set AUTOMATION_API_KEY without declaring what service or endpoint will receive it. Before installing or using this skill, ask the publisher to: (1) provide the missing code files or a clear install spec, (2) explicitly declare required env vars and what they are for, and (3) supply a trustworthy homepage or source/release URL. If you must test it, do so in an isolated environment (sandbox or VM) and avoid using real credentials — use throwaway API keys or mocks until the provenance and code can be reviewed.

Automate workflows

When to Use

• User needs workflow related functionality
• Automating automation tasks
• Automation operations

Usage

python3 scripts/workflow_automation.py --input <input> --output <output>

Configuration

Set required environment variables:

export AUTOMATION_API_KEY="your-api-key"

Output

Returns JSON with results:

{
  "success": true,
  "data": {}
}