ワンクリックで
workflow-config-guide
配置现有 Flocks 工作流的发布、集成、触发器和发布配置模板;本 skill 只定义交互协议,具体配置问题必须来自工作流目录内的 guide.md
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
メニュー
配置现有 Flocks 工作流的发布、集成、触发器和发布配置模板;本 skill 只定义交互协议,具体配置问题必须来自工作流目录内的 guide.md
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | workflow-config-guide |
| category | system |
| ui_hidden | true |
| description | 配置现有 Flocks 工作流的发布、集成、触发器和发布配置模板;本 skill 只定义交互协议,具体配置问题必须来自工作流目录内的 guide.md |
Use this skill when the user asks to configure, publish, integrate, deploy, or validate an existing Flocks workflow, especially when the task involves publish configuration templates, config.json import/fallback, API publishing, Syslog/Kafka/Webhook/Schedule triggers, file input, downstream output, sample validation, or a first-time deployment guide.
This skill is a protocol layer only. It must not be used as the source of workflow-specific configuration questions or defaults. For every existing workflow, the source of truth for configuration details is the workflow-local guide.md file in the same directory as workflow.md, workflow.json, and optional config.json.
Do not use this skill to create a brand-new workflow from scratch. Use workflow-builder for workflow design and generation, then return to this skill when the workflow already exists and needs runtime configuration.
guide.md first. If it is missing or too thin to answer the user's request, stop and use the question tool to ask whether to generate or repair guide.md from workflow.md, workflow.json, and config.json.workflow.json, workflow.md, optional legacy config.json, and meta.json. Treat the backend /api/workflow/<workflow_id>/config response as the canonical publish template. If no stored template exists, use /api/workflow/<workflow_id>/config/sync to let the backend migrate the fallback config.json.guide.md as the source for workflow-specific modes, defaults, sample requirements, validation, and recommended question order.question tool. Do not ask configuration questions in ordinary assistant text.question tool for explicit confirmation. That single approval authorizes applying the shown diff through the backend config endpoint; do not ask a second "should I call PUT" question for the same diff.~/.flocks/workspace/outputs/<today>/, computing <today> at execution time.Each workflow that can be configured by Rex should include:
<workflow_dir>/
workflow.md
workflow.json
config.json # optional import/fallback publish template
guide.md # workflow-specific configuration guide
guide.md must answer these questions for this workflow, in the workflow's own domain language:
guide.md should not contain a UI button table. If a user clicks a guide shortcut, treat the shortcut label as an intent hint, read guide.md, semantically extract the relevant guidance, defaults, constraints, examples, and validation rules, then ask the single next useful question with the question tool. If no relevant guidance exists, say that the workflow guide is missing that detail and ask whether to repair guide.md.
Treat the publish configuration template as a workflow runtime/publish template, not as a second copy of workflow code. The canonical template is stored in Storage/SQL under the backend workflow config endpoint. A workflow-local config.json is only an import/fallback artifact: when the backend has no stored template, it may read config.json once and migrate that content into Storage/SQL.
apiKeyConfigured or secret-manager references.config.json to apply a publish, input, or trigger configuration. It is a fallback import template only.Guide the user from "I have this workflow" to "I know what is configured and what I still need to do".
Ask decisions in the order specified by guide.md, using one question tool call per step. If guide.md has no order, use the clicked shortcut as the current step and ask only the single most relevant question for that shortcut. The generic categories below are only fallback headings for organizing a guide file, not universal workflow defaults:
The question tool is mandatory for this skill. Any time you need the user to choose, confirm, approve a diff, provide a missing value, decide whether to change another file, or answer a follow-up, stop prose and call question.
question is not available in the tool list, say that the configuration guide cannot continue interactively until the question tool is available. Do not fall back to inline chat questions.question with choices such as "应用上面的 diff", "只保存草稿", and "暂不修改". If the user chooses to apply the shown diff, immediately apply it through the backend config endpoint; do not ask an extra confirmation that only repeats the same side effect.question; do not ask in prose.Rule anchor: never make a configuration question choice-only.
Never make a configuration question choice-only. Every Question-tool prompt used by this skill must include a way for the user to type a custom answer:
type: "text" question when the answer may be a hostname, port, topic, path, payload shape, product name, or any value not safely covered by fixed options.type: "choice" question for recommended modes, also include a short type: "text" follow-up such as "Custom value or notes" with a placeholder that explains what the user can type. If the user has no custom value, allow them to enter "none".Do not use the Question tool to collect long JSON, field lists, or credentials.
Good pattern after showing a diff:
{
"questions": [
{
"header": "确认应用",
"question": "是否应用上面的发布配置 diff?",
"type": "choice",
"options": [
{"label": "应用 diff", "description": "通过后端配置接口写入 Storage/SQL。"},
{"label": "只保存草稿", "description": "不改运行配置,只写到输出目录。"},
{"label": "暂不修改", "description": "停止本次配置变更。"}
]
},
{
"header": "补充说明",
"question": "如需限制范围或补充要求,请输入;没有则填 none。",
"type": "text",
"placeholder": "none"
}
]
}
When the user approves an apply:
GET /api/workflow/<workflow_id>/config.POST /api/workflow/<workflow_id>/config/sync so the backend migrates the fallback file or creates a generated template.PUT /api/workflow/<workflow_id>/config with the full proposed config object as the JSON body.config as the saved template and runtime as the current effective state; do not infer runtime state from template enabled fields.~/.flocks/workspace/outputs/<today>/ instead of changing config.json, and clearly state that the change was not applied, not published, and not started.metadata.sampleInputs, workflow.json sample inputs, or the user's pasted sample when a safe local test is available.PUT /api/workflow/<workflow_id>/config and report the exact failure.If the user says "publish as API", "Syslog input", "Kafka input", "Webhook input", or "Schedule" from the Publish page, treat it as a guided configuration intent:
GET /config -> diff -> question confirmation -> PUT /config./publish, /unpublish, /syslog-config, /kafka-config, /poller-config, or /triggers.When the user wants to start, stop, enable, disable, publish, or unpublish a capability, do not edit the template. Use the runtime endpoint for that capability, such as /publish, /unpublish, /syslog-config, /kafka-config, /poller-config, or /triggers.
If the user chooses draft mode, save the proposed config under ~/.flocks/workspace/outputs/<today>/ and list the path in the final report.
The final report must include:
config.json path.Do not look for skill-relative references/ files during workflow configuration. Workflow-specific details must come from the current workflow's own guide.md; this prevents loading stale generic instructions or resolving a project-level skill path as a user-level path.
使用统一的 Web2CLI 流程捕获网站的 XHR/Fetch 请求,并生成可复用的 CLI、Markdown 文档。通过浏览器的 `cdp-direct` 模式复用用户 Chromium 系浏览器登录态与 CDP 能力。适用于复现登录后操作、沉淀接口调用样例,或基于页面操作生成自动化工具时。
根据自然语言描述生成 flocks 内置工作流(workflow.md, workflow.json)。当用户提出创建/设计/生成/搭建工作流或任何多步骤流程(如告警调查、事件响应、SOP/Runbook 自动化)时使用本 skill。
统一处理浏览器使用任务,支持可见浏览器 CDP 直连、专用 headless CDP、agent-browser。Use when the user asks to browse websites, interact with pages, fill forms, capture screenshots, reuse an existing Chrome/Chromium/Edge login session, work with an already-open browser/sidebar browser, access login-only/internal/dynamic pages, or automate browser actions.
Guide users to create, develop, hide, or delete user-defined custom pages that appear in the WebUI left navigation under Home, with live preview and no restart required. Also guide development of page-scoped backend APIs through the User Defined Page Backend API Runtime when built-in APIs are insufficient. Trigger when the user asks to create, remove, or delete a custom page, user-defined page, dashboard, navigation tab, integrate custom APIs for a page, or sends messages such as "create a custom page", "delete custom page", "remove user-defined page", "创建自定义页面", "删除自定义页面", "用户自定义页面", "自定义页面", "左侧导航页面", "首页下面的页面", "页面数据来源", "自定义 API", or wants help understanding how custom pages work in Flocks.
Create new sub-agents (subagents) by generating YAML config and prompt files in ~/.flocks/plugins/agents/. The created agent can be delegated to by Rex via delegate_task. Use when the user asks to create, add, or generate a new agent.
用于处理 OneSEC/OneDNS 终端安全平台相关任务,适合通过API或者结合浏览器进行以下任务: 终端安全调查、威胁事件分析、终端告警检索、行为日志排查、IOC 查询、恶意文件分析、DNS 威胁排查、软件与终端资产查询、任务进度查看、审计日志分析、病毒扫描和常见终端处置场景。只要用户提到 OneSEC、微步 EDR等相关操纵需求时,必须先加载本 skill。本 skill 是 OneSEC 平台操作的唯一决策入口:在未阅读本 skill 并完成模式判断前,不要直接调用任何 `onesec_*` tool。