ClawHub

Workflowy

v1.0.7

Workflowy outliner CLI for reading, searching, and editing nodes. Use when the user wants to interact with their Workflowy outline — searching, adding items,...

⭐ 3· 1.8k·1 current·1 all-time
by@waldyrious
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (Workflowy CLI) match the declared requirements: a 'workflowy' binary, a Workflowy API key (WORKFLOWY_API_KEY), and a config file at ~/.workflowy/api.key. These are appropriate for a CLI that reads/edits a Workflowy outline.
✓
Instruction Scope
SKILL.md only instructs use of the workflowy CLI and how to provide the API key (file or env var). It does not instruct reading unrelated system files, exfiltrating data to unexpected endpoints, or modifying other skill/system configurations. It warns about destructive bulk operations.
ℹ
Install Mechanism
Install uses a Homebrew formula (mholzen/workflowy/workflowy-cli) which is an expected mechanism for a CLI. Because this is a third‑party tap/formula rather than an official, widely-known package, users should inspect the formula/source before installing to ensure it does not run unexpected install-time scripts.
✓
Credentials
The only credential required is the Workflowy API key (WORKFLOWY_API_KEY) and/or the config file ~/.workflowy/api.key, which is proportionate to the skill's purpose. No unrelated secrets or broad environment access are requested.
✓
Persistence & Privilege
The skill is not marked always:true and is user-invocable; it does not request system-wide persistent privileges or modify other skills. Autonomous invocation is allowed by default but is not combined with other concerning privileges here.
Assessment
This skill appears to be what it says: a thin integration for the Workflowy CLI. Before installing, verify the Homebrew tap/formula source (mholzen/workflowy/workflowy-cli) on GitHub to ensure it doesn't contain unexpected install scripts. Provide only your Workflowy API key (store it at ~/.workflowy/api.key with restricted permissions or set WORKFLOWY_API_KEY), and be cautious when running destructive commands (delete, bulk replace). If you need higher assurance, inspect the brew formula and the CLI source code on the linked GitHub repo prior to installation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a893jhf0vmsy5w2h8kzw2x983emf2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📝 Clawdis
Binsworkflowy
Config~/.workflowy/api.key
Primary envWORKFLOWY_API_KEY

Install

Homebrew
Bins: workflowy
brew install mholzen/workflowy/workflowy-cli

Comments