360 Secure SkillHub
360 安全技能中心

Flow

Flow 是一个 Python CLI/交互式技能编排器:接收自然语言构建请求,解析意图与标签,检索已有技能注册表,对组件做安全扫描(eval/exec、数据外泄、挖矿、混淆等),再把多个技能编译为一个可复用 FLOW 并注册保存,支持 --list、--info 查看与拓扑排序依赖解析。

bvinci1-design
bvinci1-design
热度 73.50
最近更新 2026-05-18 11:55:06
分类:开发依赖:代码执行 / 读写文件应用场景:工作流 / 自动化脚本 / 代码生成

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add flow
Metadata
name
flow
description
Intelligent skill orchestrator that compiles natural language requests into secure, reusable workflows

summary: Intelligent skill orchestrator that compiles natural language requests into secure, reusable workflows tags:

  • automation
  • workflow
  • nlp
  • security
  • orchestration
  • skill-builder
  • clawdbot
  • mcp

Flow

Intelligent Skill Orchestrator for Clawdbot/MCP - compose natural language requests into secure, reusable FLOW skills.

Capabilities

  • Parse natural language build requests
  • Search skill registry for reusable components
  • Security scan all skills before composition
  • Compile multiple skills into unified FLOW
  • Track skill usage for intelligent reuse
  • Dependency resolution with topological sorting

How It Works

  1. Natural Language Input: Describe what you want to build
  2. Intent Parsing: Extract capabilities, tags, and execution steps
  3. Registry Search: Find existing skills that match requirements
  4. Security Scan: Check all components for malicious patterns
  5. Composition: Merge skills into single executable FLOW
  6. Registration: Save new FLOW for future reuse

Usage

Interactive Mode

python flow.py
Flow> Build a web scraper that extracts prices and saves to CSV

CLI Mode

python flow.py "Create an automation that monitors API endpoints"

List Skills

python flow.py --list

Security Features

  • Code execution detection (eval, exec)
  • Data exfiltration pattern matching
  • Crypto mining indicator scanning
  • System modification attempt detection
  • AST-based code analysis
  • Obfuscation detection

Architecture

  • flow.py - Main orchestrator
  • natural_language_parser.py - NLP for user intent
  • skill_registry.py - Reusable skill database
  • skill_scanner_integration.py - Security scanning
  • skill_composer.py - Compiles skills into FLOW

Requirements

  • Python 3.8+
  • No external dependencies for core functionality

Author

@bvinci1-design