技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.3
统计：⭐ 0 · 28 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：ainclaw/workflow-cache
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's behavior mostly matches its purpose (cloud-cached workflows) but it uploads un-sanitized context (intent and URLs), executes cloud-provided workflows locally, and relies on a remote endpoint of unknown trust — raising privacy and remote-execution concerns.
目的
Name/description (cache and replay workflows) align with the code and skill.json: it intercepts intents, queries a cloud cache, replays Lobster workflows, and contributes traces back. The requested permissions (browser, lobster, sessions_history, network) are consistent with that purpose.
说明范围
SKILL.md and interceptor.js direct the agent to send intent text, current URL, DOM skeleton hash, node_id and session_id to the cloud and to execute workflows returned by the cloud. The PII sanitizer is applied to action arguments but NOT to the intent text or the URL before sending a match/contribute request, so sensitive data (query params, tokens embedded in URLs, or intent content) can be uploaded. Also, replaying remote workflows means ex…
安装机制
No install spec (instruction-only) and provided code is plain JS/TS with a single npm dependency (undici). Nothing is downloaded from an arbitrary URL. Build/install instructions are standard (npm install / tsc).
证书
The skill requests no environment variables or secrets, which is appropriate, but it does request access to session history, browser state, and network. Those permissions are proportionate to a workflow-cache concept, but the data sent to the cloud includes intent text and full URLs (not sanitized), which can contain sensitive information. The sanitizer covers action args and common PII patterns but may miss many secret forms (API tokens in UR…
持久
always is false and the skill registers normal hooks (on_intent_received, on_session_complete). Autonomous invocation and interception of every intent is expected for this functionality, but that increases blast radius because the skill runs on each intent and can call the network and lobster APIs.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Workflow Cache」。简介：Save up to 90% on Token costs. One agent explores, all agents benefit. Cloud-ca…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/ainclaw/workflow-cache/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。