技能 when-using-flow-nexus-platform-use-flow-nexus-platform
📦

when-using-flow-nexus-platform-use-flow-nexus-platform

内容修订 r1 高风险 🔑 环境变量⚙️ 外部命令🌐 网络访问

管理 Flow Nexus 平台工作流

Flow Nexus 设置可能涵盖身份验证、沙盒、部署、监控和计费。此技能为这些平台任务提供结构化的操作流程。

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "when-using-flow-nexus-platform-use-flow-nexus-platform" from https://skillstore.io/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform.md and its manifest at https://skillstore.io/api/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform.md 已签名 manifest GET /api/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/manifest 已签名 lockfile GET /api/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/lockfile

测试它

正在使用“when-using-flow-nexus-platform-use-flow-nexus-platform”。 在部署前验证我的 Flow Nexus 设置。

预期结果:

一份就绪检查清单，涵盖 MCP 可用性、身份验证状态、账户详情、所需密钥和资源限制。

正在使用“when-using-flow-nexus-platform-use-flow-nexus-platform”。 准备沙盒部署工作流。

预期结果:

一份分阶段部署计划，包括沙盒创建、服务设置、应用部署、健康检查和监控任务。

正在使用“when-using-flow-nexus-platform-use-flow-nexus-platform”。 为此项目记录计费控制。

预期结果:

一份计费运营摘要，涵盖额度余额审查、付款历史、充值选项和成本优化说明。

安全审计

高风险
v8 • 2026/7/6 打开版本化报告

Most static external-command hits are Markdown code-fence false positives, but real shell-command substitutions and generated executable scripts remain. The skill also forwards API keys and database URLs into Flow Nexus deployment variables and includes billing auto-refill actions, so publication should require strong warnings and author remediation.

4
已扫描文件
1,875
分析行数
21
复核项
0
已忽略误报

已确认安全问题 (2)

高
SKILL.md:966-971SKILL.md:1004-1012
Automated Billing Auto-Refill Configuration
The skill instructs agents to enable Flow Nexus auto-refill with a threshold and amount, and also generates a billing script that can configure auto-refill. This can create financial changes if executed without explicit account-owner approval.
The cited lines directly enable auto-refill and create a script path for changing the setting. This is a clear business-logic risk involving paid platform resources.
中
SKILL.md:118-129
Reusable Example Credentials in Registration Flow
The registration and login examples use the same visible email and password values. Users could copy these placeholders into a real account, creating predictable credentials.
The hardcoded credentials are visible and repeated in registration and login examples. They appear to be placeholders, so confidence is high enough to flag but not critical.
能力复核项 (21)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高
SKILL.md:565
Shell command substitution
--content="$(cat platform/services/app.js)"
The command substitutes local file contents into a Flow Nexus sandbox upload. That can move workspace data to an external platform if run without reviewing the file contents.
高
SKILL.md:522
Database connection strings
"DATABASE_URL": "$DATABASE_URL"
The deployment example forwards DATABASE_URL into Flow Nexus environment variables. Database connection strings are sensitive and can expose data access if mishandled.
高
SKILL.md:516
Generic API/secret keys
"anthropic_api_key": "$ANTHROPIC_API_KEY",
The deployment example passes ANTHROPIC_API_KEY into a Flow Nexus template variable. That is a real secret-forwarding risk to an external platform.
中
SKILL.md:113
Shell command substitution
npx claude-flow@alpha hooks session-restore --session-id "flow-nexus-setup-$(date +%s)"
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:142
Shell command substitution
--value "{\"user_id\": \"$USER_ID\", \"tier\": \"free\", \"timestamp\": \"$(date -Iseconds)\"}"
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:248
Shell command substitution
--value "{\"status\": \"complete\", \"user_id\": \"$USER_ID\", \"authenticated\": true, \"timestamp\
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:264
Shell command substitution
USER_ID=$(npx claude-flow@alpha memory retrieve --key "flow-nexus/user-id" | jq -r '.value')
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:490
Shell command substitution
--value "{\"status\": \"complete\", \"sandbox_id\": \"$SANDBOX_ID\", \"subscription_id\": \"$SUBSCRI
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:697
Shell command substitution
--value "{\"status\": \"complete\", \"deployment_id\": \"$DEPLOYMENT_ID\", \"app_running\": true, \"
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:716
Shell command substitution
SANDBOX_ID=$(npx claude-flow@alpha memory retrieve --key "flow-nexus/sandbox-id" | jq -r '.value')
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:726
Shell command substitution
DEPLOYMENT_ID=$(npx claude-flow@alpha memory retrieve --key "flow-nexus/deployment-id" | jq -r '.val
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:733
Shell command substitution
USER_ID=$(npx claude-flow@alpha memory retrieve --key "flow-nexus/user-id" | jq -r '.value')
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:742
Shell command substitution
--value "{\"health\": \"good\", \"sandbox_status\": \"running\", \"log_lines\": 100, \"timestamp\":
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:796
Shell command substitution
SANDBOX_ID="${SANDBOX_ID:-$(npx claude-flow@alpha memory retrieve --key flow-nexus/sandbox-id | jq -
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:941
Shell command substitution
--value "{\"status\": \"complete\", \"monitoring\": \"active\", \"ops_tools\": \"ready\", \"timestam
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:974
Shell command substitution
USER_ID=$(npx claude-flow@alpha memory retrieve --key "flow-nexus/user-id" | jq -r '.value')
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:1159
Shell command substitution
--value "{\"status\": \"complete\", \"balance\": $BALANCE, \"auto_refill\": true, \"timestamp\": \"$
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:1164
Shell command substitution
--value "{\"status\": \"success\", \"authenticated\": true, \"deployed\": true, \"monitored\": true,
The skill instructs a shell to evaluate command substitution while running npx or Flow Nexus operations. This can propagate command output into platform actions and should require user review before execution.
中
SKILL.md:552
Unix shell invocation
#!/bin/bash
The skill creates executable bash scripts that manage deployments, operations, or billing. These scripts are expected functionality, but they execute external platform commands when run.
中
SKILL.md:793
Unix shell invocation
#!/bin/bash
The skill creates executable bash scripts that manage deployments, operations, or billing. These scripts are expected functionality, but they execute external platform commands when run.
中
SKILL.md:985
Unix shell invocation
#!/bin/bash
The skill creates executable bash scripts that manage deployments, operations, or billing. These scripts are expected functionality, but they execute external platform commands when run.

风险因素

🔑 环境变量 (10)
process-diagram.gv:134 SKILL.md:324 SKILL.md:584 SKILL.md:600 SKILL.md:324 SKILL.md:584 SKILL.md:600 SKILL.md:275 SKILL.md:522 SKILL.md:516
⚙️ 外部命令 (111)
SKILL.md:317 SKILL.md:8-35 SKILL.md:35-54 SKILL.md:54-60 SKILL.md:60-108 SKILL.md:108-143 SKILL.md:143-146 SKILL.md:146-174 SKILL.md:174-177 SKILL.md:177-213 SKILL.md:213-218 SKILL.md:218-221 SKILL.md:221-226 SKILL.md:226-229 SKILL.md:229-231 SKILL.md:231-236 SKILL.md:236-245 SKILL.md:245-249 SKILL.md:249-262 SKILL.md:262-311 SKILL.md:311-314 SKILL.md:314-400 SKILL.md:400-403 SKILL.md:403-436 SKILL.md:436-457 SKILL.md:457-478 SKILL.md:478-487 SKILL.md:487-491 SKILL.md:491-504 SKILL.md:504-546 SKILL.md:546-549 SKILL.md:549-605 SKILL.md:605-612 SKILL.md:612-615 SKILL.md:615-624 SKILL.md:624-629 SKILL.md:629-633 SKILL.md:633-635 SKILL.md:635-649 SKILL.md:649-651 SKILL.md:651-654 SKILL.md:654-660 SKILL.md:660-685 SKILL.md:685-694 SKILL.md:694-698 SKILL.md:698-711 SKILL.md:711-743 SKILL.md:743-746 SKILL.md:746-833 SKILL.md:833-836 SKILL.md:836-844 SKILL.md:844-853 SKILL.md:853-856 SKILL.md:856-862 SKILL.md:862-874 SKILL.md:874-880 SKILL.md:880-911 SKILL.md:911-919 SKILL.md:919-929 SKILL.md:929-938 SKILL.md:938-942 SKILL.md:942-955 SKILL.md:955-979 SKILL.md:979-982 SKILL.md:982-1037 SKILL.md:1037-1040 SKILL.md:1040-1076 SKILL.md:1076-1078 SKILL.md:1078-1081 SKILL.md:1081-1083 SKILL.md:1083-1086 SKILL.md:1086-1088 SKILL.md:1088-1093 SKILL.md:1093-1095 SKILL.md:1095-1100 SKILL.md:1100-1102 SKILL.md:1102-1130 SKILL.md:1130-1132 SKILL.md:1132-1146 SKILL.md:1146-1156 SKILL.md:1156-1165 SKILL.md:113 SKILL.md:142 SKILL.md:248 SKILL.md:264 SKILL.md:490 SKILL.md:565 SKILL.md:697 SKILL.md:716 SKILL.md:726 SKILL.md:733 SKILL.md:742 SKILL.md:796 SKILL.md:941 SKILL.md:974 SKILL.md:1159 SKILL.md:1164 SKILL.md:108-143 SKILL.md:245-249 SKILL.md:262-311 SKILL.md:487-491 SKILL.md:549-605 SKILL.md:694-698 SKILL.md:711-743 SKILL.md:746-833 SKILL.md:938-942 SKILL.md:955-979 SKILL.md:1156-1165 SKILL.md:552 SKILL.md:793 SKILL.md:985
🌐 网络访问 (8)
SKILL.md:275 SKILL.md:286 SKILL.md:650 SKILL.md:852 SKILL.md:1253 SKILL.md:1254 SKILL.md:1255 SKILL.md:1256
审计者: codex 查看审计历史 →
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/security.svg)](https://skillstore.io/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

DNYoussef. (2026). when-using-flow-nexus-platform-use-flow-nexus-platform security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/audits/8

BibTeX 引用

@techreport{dnyoussef-dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform-2026, author = {DNYoussef}, title = {when-using-flow-nexus-platform-use-flow-nexus-platform security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "when-using-flow-nexus-platform-use-flow-nexus-platform security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "DNYoussef" date-released: "2026-07-06" url: "https://skillstore.io/skills/dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform/audits/8" identifiers: - type: other value: "skillstore:dnyoussef-when-using-flow-nexus-platform-use-flow-nexus-platform:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
55
架构
85
可维护性
87
内容
70
社区
70
规范符合性

你能构建什么

设置开发者沙盒

创建包含存储、数据库和服务配置的 Flow Nexus 沙盒，用于应用程序开发工作。

部署并观察应用

部署模板或自定义应用程序，然后检查健康状态、日志、指标和执行状态。

记录平台运营

为 Flow Nexus 环境生成架构、部署、运营和计费说明。

试试这些提示

检查 Flow Nexus 访问权限 
使用此技能验证我的 Flow Nexus MCP 访问权限、身份验证状态和所需的设置前提条件。不要创建付费资源。
创建开发沙盒 
使用此技能指导开发环境的沙盒、存储、数据库和实时设置。在运行命令前先询问。
部署并监控应用程序 
使用此技能部署一个小型 Flow Nexus 应用程序，记录部署 ID，并验证健康状态、日志和指标。
审查完整平台上线 
使用此技能规划完整的 Flow Nexus 上线流程，包括身份验证、服务、部署、监控、成本控制和风险检查点。

最佳实践

  • 在执行前审查每条命令和平台操作，尤其是计费和部署操作。
  • 仅通过批准的密钥管理渠道使用真实密钥，不要粘贴到提示文本中。
  • 记录生成的资源 ID 和清理步骤，以便移除未使用的沙盒和存储。

避免

  • 不要将示例电子邮件或密码复制到真实的 Flow Nexus 账户中。
  • 未经账户所有者明确批准，不要启用自动充值或创建付款链接。
  • 在检查工作区文件内容是否包含密钥之前，不要将其上传到沙盒。

常见问题

此技能管理什么？
它管理 Flow Nexus 身份验证、沙盒、存储、数据库、部署、监控和计费工作流。
它是否需要外部服务？
是的。它依赖 Flow Nexus 服务、MCP 工具、网络访问和已通过身份验证的账户。
它能创建付费资源吗？
是的。该流程包含可能影响成本的计费、付款链接和自动充值示例。
自动运行每条命令都安全吗？
不能。命令应先经过审查，因为它们可能会部署资源、上传文件或更改计费设置。
它是否支持 Claude Code 和 Codex？
是的。报告标明支持 Claude、Codex 和与 Claude Code 兼容的工作流。
使用前我应该替换什么？
替换占位符凭据、应用程序名称、资源 ID、API 密钥、数据库 URL 和计费金额。

开发者详情

作者

DNYoussef

许可证

MIT

Skillstore 修订

r1

版本提示

作者未声明版本。

仓库

https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/platform/when-using-flow-nexus-platform-use-flow-nexus-platform

引用

72d5025b022c77f7a51bdf5c1637c689c80e89d1

维护新鲜度

2026/7/23

使用量

5 次下载 · 168 次浏览

文件结构

📄 process-diagram.gv

📄 PROCESS.md

📄 README.md

📄 SKILL.md

DNYoussef 的更多技能

查看全部

相关技能

查看全部