auto-workflow
Analysis
This is a legitimate-looking workflow engine, but it gives workflows broad power to run shell commands, modify or delete files, and run scheduled tasks, so it should be reviewed carefully before use.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
import subprocess ... elif action == 'shell.exec': return self.shell_exec(params)
Workflow steps dispatch to a shell execution action, and no command allowlist or approval boundary is shown around that action.
params = step.get('params', {}) ... elif action == 'file.delete': return self.file_delete(params) ... os.remove(path) ... shutil.rmtree(path)File paths come from workflow step parameters, and the delete action can remove either files or entire directories with no path scope, dry-run, or confirmation shown.
auto-workflow run backup --source ~/documents --dest ~/backups --schedule "0 2 * * *"
The skill intentionally supports recurring scheduled workflows; this is disclosed, but lifecycle controls such as viewing, stopping, or limiting scheduled jobs are not described.
Source: unknown; Homepage: none; Install specifications: No install spec — this is an instruction-only skill; Code file presence: scripts/workflow-engine.py
The package includes runnable code and documents CLI-style usage, but the source provenance and installation path are not clearly declared.