菜单
Builds the connector-ready Lark approval instance payload for the onboarding email approval flow. Use after Aevatar has received a Lark/Base onboarding event and before calling the NyxID Lark approval connector.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Aevatar scheduling & workflow automation: scheduled_agent_creator (cron/one-shot), the long-running task automation playbook, workflow creation semantics (Scope Workflow vs Ornn publish), agent_builder lifecycle, and scheduled-run credential lifetimes (5-minute broker token at fire) with a token_expired triage protocol.
Aevatar channel & delivery how-to: capability tools (code_execute, nyxid_proxy, GitHub PAT fallback, channel bots), token_expired/401 credential triage for capability tools, LLM route selection slash commands, channel_registrations (staged Lark provisioning), and agent_delivery_targets binding.
Configure and prove Aevatar codex_exec for one NyxID account, choosing either operator-managed OpenSandbox or a private NyxID node-backed SSH service. Use for managed allowlist/binding readiness, node registration, forced-command hardening, service binding, Codex authentication/workspace configuration, mandatory public-sample verification, or diagnosing managed sandbox and private SSH failures.
Mount and run harmless Aevatar workflows that prove codex_exec works through either the operator-managed OpenSandbox target or a private NyxID node-backed SSH target. Use after configuring managed access or a personal node, before real tasks, and when diagnosing identity, allowlist, binding, sandbox, service, principal, or Codex runner failures.
Decide — honestly — whether a thing the user wants to build on Aevatar is possible, what its prerequisites are, or why it cannot be done, BEFORE anyone starts building. Use this first whenever a user describes a goal rather than a concrete artifact — "can aevatar do X", "I want a bot that…", "build me something that posts to Twitter / reads my GitHub / replies on Telegram", "is it possible to…", "automate … every day", "let Lark Base trigger a workflow". It teaches the one hard premise (every third-party capability is brokered by NyxID), the two distinct surfaces (outbound connector vs inbound channel), external HTTP trigger options such as Lark Base automation, how to check what is actually connectable, the prerequisite for each capability class, what is host-gated (and so not self-serve), and what is genuinely impossible without new NyxID/Aevatar platform work — so you can negotiate scope and give the user a straight answer plus next steps instead of over-promising. It scopes; it does not build (hand off to
Entry point, panorama, and router for the entire Aevatar skill family — load this FIRST whenever someone wants to build, run, publish, schedule, externally trigger, or operate anything on Aevatar ("create an agent team", "make a workflow / member", "publish or bind a service", "register it with NyxID", "set up a recurring / cron run", "invoke my service", "let Lark Base trigger my workflow"), wants to know whether something is even possible ("can Aevatar do X?", "能不能用 aevatar 实现"), or just wants to know what Aevatar can do. It teaches the object model (scope → team → member[workflow|script|gagent] → service → schedule/external trigger), how to authenticate as a NyxID-bearer REST client, how to resolve your scope, and the two caller modes (client REST vs in-session server-side tools). It does not do the work itself — it routes you to the right companion skill (feasibility-advisor, workflow-authoring, team-builder, service-publisher, scheduler, plus diagnostics probes and the safety-net fallback), held together
| name | lark-onboarding-email-approval-payload-builder |
| version | 1.1 |
| description | Builds the connector-ready Lark approval instance payload for the onboarding email approval flow. Use after Aevatar has received a Lark/Base onboarding event and before calling the NyxID Lark approval connector. |
| metadata | {"category":"plain","tag":["aevatar","s-capability","onboarding","lark-approval","payload-builder"],"clawdbot":{"emoji":"mailbox_with_mail","files":["references/*","scripts/*"]}} |
Use this skill when an Aevatar-native onboarding flow needs to create the Lark approval instance payload for a new employee email account.
This skill does one thing: turn an onboarding event into a deterministic payload for POST /open-apis/approval/v4/instances. It does not fetch tenant tokens, store Lark credentials, submit the approval, or handle approval callbacks.
Use for lark-onboarding-email-approval when the caller has an onboarding event with:
The original n8n flow is a short linear flow: webhook, format fields, get Lark tenant token, call approval instance API, respond. This skill replaces only the formatting step.
Required input keys, after alias normalization:
larkNamedepartmentstartDateoperatorIdOptional input keys:
approvalCodecompanyDomainrequestDateautoSubmitLabelField aliases, email generation rules, Lark widget ids, and output shape are defined in references/onboarding-email-approval-contract.md.
Return one JSON object with:
summaryemployeeemailRequestrequestDetailformlark.bodyThe returned lark.body is connector-ready for:
POST /open-apis/approval/v4/instances
Follow references/onboarding-email-approval-contract.md. If executing code is allowed, use scripts/build_onboarding_email_approval_payload.js as the reference implementation. If executing code is not allowed, reproduce the same transformations exactly.
Do not invent employee data, Lark app credentials, tenant tokens, approval definitions, operator ids, or approvers.
If any required field is missing, return:
{
"needs_more_information": true,
"missing": ["larkName"]
}