Skill audit report

jeecg-bpmn Audit report.

Use when user asks to create/generate/edit/modify a BPM workflow, design a Flowable BPMN process, or says "创建流程", "生成流程", "新建流程", "设计流程", "画流程", "审批流程", "工作流", "BPM", "BPMN", "create flow", "create process", "new workflow", "generate workflow". Also triggers when user describes an approval chain like "先经理审批再HR审批" or mentions process nodes like "开始→审批→网关→结束". Also triggers for OA application creation: "创建OA应用", "创建审批单", "创建报销单", "创建请假单", "做一个OA表单带流程", "一键创建表单和流程", "create OA app", "create approval form with workflow". Also triggers for ANY operation on existing processes: "编辑流程", "修改流程", "删除监听器", "添加监听器", "删除节点", "添加节点", "修改节点", "配置节点", "流程中的", "edit process", "modify process", "delete listener", "add listener", "remove listener", "add node", "delete node", "configure node". Key rule: whenever user mentions a specific process name (like "网关测试") with any modification intent, this skill MUST be invoked FIRST before any manual API exploration.

BLOCKED · BLOCKNeeds reviewGenerated Nov 10, 2026Heuristic metadata audit
69
Audit
60
Trust
64
Quality
70
Security
76
Maintain
92
Install

OpenAgentSkill Trust Score

60
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

62

226 GitHub stars

Stars/forks activity

INFO

62

226 stars, 67 forks; issue activity unavailable in current metadata

Recent maintenance

INFO

76

4mo since push

License clarity

PASS

86

Apache-2.0

README/SKILL.md completeness

INFO

76

Public metadata needs stronger README/SKILL.md context

Dependency/runtime risk

WARN

46

command execution surface, credential or environment access

Install availability

PASS

92

npx skills add jeecgboot/skills --skill jeecg-bpmn

Install command safety

PASS

92

standard package or runtime install path

Permission surface

FAIL

22

secrets or environment access, shell or command execution

Repository evidence

PASS

86

https://github.com/jeecgboot/skills/tree/main/jeecg-bpmn

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

5 Passed · 14 Needs review

Install path

92

PASS

npx skills add jeecgboot/skills --skill jeecg-bpmn

Repository

88

PASS

https://github.com/jeecgboot/skills/tree/main/jeecg-bpmn

License

86

PASS

Apache-2.0

Maintenance

76

CHECK

4mo since push

AI review

55

CHECK

The SKILL.md contains a placeholder `<SKILL_NAME>` that should be replaced with the actual skill name.

README/SKILL.md completeness

84

PASS

Usable description available

Dependency risk

46

FIX

command execution surface, credential or environment access

Install command safety

92

PASS

standard package or runtime install path

Permission surface

22

FIX

secrets or environment access, shell or command execution

Stars/forks activity

62

CHECK

226 stars, 67 forks; issue activity unavailable in current metadata

Adoption

68

INFO

226 GitHub stars

Warnings

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • The SKILL.md contains a placeholder `<SKILL_NAME>` that should be replaced with the actual skill name.
  • The skill depends on other skills (jeecg-desform, jeecg-system) which may not be present in the same repository, potentially causing import failures.
  • The SKILL.md is very long and complex, which might be overwhelming for some users, though it is thorough.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • Dependency/runtime risk: command execution surface, credential or environment access
  • Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next