Skill audit report
jeecg-bpmn Audit report.
Use when user asks to create/generate/edit/modify a BPM workflow, design a Flowable BPMN process, or says "创建流程", "生成流程", "新建流程", "设计流程", "画流程", "审批流程", "工作流", "BPM", "BPMN", "create flow", "create process", "new workflow", "generate workflow". Also triggers when user describes an approval chain like "先经理审批再HR审批" or mentions process nodes like "开始→审批→网关→结束". Also triggers for OA application creation: "创建OA应用", "创建审批单", "创建报销单", "创建请假单", "做一个OA表单带流程", "一键创建表单和流程", "create OA app", "create approval form with workflow". Also triggers for ANY operation on existing processes: "编辑流程", "修改流程", "删除监听器", "添加监听器", "删除节点", "添加节点", "修改节点", "配置节点", "流程中的", "edit process", "modify process", "delete listener", "add listener", "remove listener", "add node", "delete node", "configure node". Key rule: whenever user mentions a specific process name (like "网关测试") with any modification intent, this skill MUST be invoked FIRST before any manual API exploration.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
INFO62
226 GitHub stars
Stars/forks activity
INFO62
226 stars, 67 forks; issue activity unavailable in current metadata
Recent maintenance
INFO76
4mo since push
License clarity
PASS86
Apache-2.0
README/SKILL.md completeness
INFO76
Public metadata needs stronger README/SKILL.md context
Dependency/runtime risk
WARN46
command execution surface, credential or environment access
Install availability
PASS92
npx skills add jeecgboot/skills --skill jeecg-bpmn
Install command safety
PASS92
standard package or runtime install path
Permission surface
FAIL22
secrets or environment access, shell or command execution
Repository evidence
PASS86
https://github.com/jeecgboot/skills/tree/main/jeecg-bpmn
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add jeecgboot/skills --skill jeecg-bpmn
Repository
88
https://github.com/jeecgboot/skills/tree/main/jeecg-bpmn
License
86
Apache-2.0
Maintenance
76
4mo since push
AI review
55
The SKILL.md contains a placeholder `<SKILL_NAME>` that should be replaced with the actual skill name.
README/SKILL.md completeness
84
Usable description available
Dependency risk
46
command execution surface, credential or environment access
Install command safety
92
standard package or runtime install path
Permission surface
22
secrets or environment access, shell or command execution
Stars/forks activity
62
226 stars, 67 forks; issue activity unavailable in current metadata
Adoption
68
226 GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- The SKILL.md contains a placeholder `<SKILL_NAME>` that should be replaced with the actual skill name.
- The skill depends on other skills (jeecg-desform, jeecg-system) which may not be present in the same repository, potentially causing import failures.
- The SKILL.md is very long and complex, which might be overwhelming for some users, though it is thorough.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- Dependency/runtime risk: command execution surface, credential or environment access
- Permission surface: secrets or environment access, shell or command execution
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
Last30days Skill
Research the last 30 days across Reddit, X, YouTube, Hacker News, Polymarket, GitHub, and the web, then synthesize a grounded brief for an AI agent.
64K Stars · Audit report
Academic Research Skills
Academic Research Skills for Claude Code: research → write → review → revise → finalize
38K Stars · Audit report
mono-color
Generate original one-ink or controlled two-ink editorial images from any theme, sentence, article idea, object, or reference photo. Always use this skill when the user asks for 单色海报、双色印刷、单色调视觉、蓝色/绿色孔版印刷、risograph、网点照片、复古或当代编辑排版、zine poster, monochrome editorial poster, duotone print, or asks to use the mono-color style. It uses an adaptive white, gray, or pale-beige substrate, no more than two printing inks, active negative space, terse human language, and strong serif/grotesk/mono typography without making retro styling the default or copying a source composition, wording, logo, or artwork. Produce both the final generation prompt and the generated raster image unless the user explicitly asks for prompt only.
1.9K Stars · Audit report