Agent skill · Audited from source
workflow
skill · zhinkgit/embeddedskillsMIT licenceAudited 28 Oct 2026 · source 674ae8bca880
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 674ae8bca880 and found no filesystem, network or shell access and no hard-coded secrets. What it does: embeddedskills 的薄编排层,用于在当前 workspace 中发现工程、选择 build/flash/debug/observe 后端、串联 .embeddedskills/state.json,并聚合底层 skill 的结果。 当用户明确输入以下命令之一:"一键构建烧录"、"自动诊断"、"串起 build -> flash -> debug -> observe" 或显式调用 /workflow 时触发。
Cite
Cite this page
ModelsAtlas. “workflow (zhinkgit/embeddedskills)”. Retrieved 28 Oct 2026. https://modelsatlas.com/skills/zhinkgit/workflow
3 skills are called “workflow”. You are viewing zhinkgit/embeddedskills.
- zhinkgit/embeddedskills★ 772✓SAFE
- SamurAIGPT/Generative-Media-Skills★ 5.5k!CAUTION
- vercel/workflow★ 2.5k✓SAFE
Trust audit
Audit 0.4.1 · source read 28 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 674ae8bca880 · 28 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherzhinkgit GitHub userOwner of the repository this skill is read from
- Source folderzhinkgit/embeddedskills/workflowThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict674ae8bca880A new audit runs when the source changes
- Repository statusNot archivedLast push 8 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: embeddedskills 的薄编排层,用于在当前 workspace 中发现工程、选择 build/flash/debug/observe 后端、串联 .embeddedskills/state.json,并聚合底层 skill 的结果。 当用户明确输入以下命令之一:"一键构建烧录"、"自动诊断"、"串起 build -> flash -> debug -> observe" 或显式调用 /workflow 时触发。
---
name: workflow
description: >-
embeddedskills 的薄编排层,用于在当前 workspace 中发现工程、选择 build/flash/debug/observe
后端、串联 .embeddedskills/state.json,并聚合底层 skill 的结果。
当用户明确输入以下命令之一:"一键构建烧录"、"自动诊断"、"串起 build -> flash -> debug -> observe" 或显式调用 /workflow 时触发。
argument-hint: "[plan|build|build-flash|build-debug|observe|diagnose] ..."
---
# Workflow 编排层
本 skill 不重复实现底层逻辑,只做发现、选择、串联和聚合。
支持 **Keil** / **GCC** / **EIDE** 三种构建后端,以及 **jlink** / **openocd** / **probe-rs** 三种 flash/debug/observe 后端。
`observe` 阶段当前会给出 `jlink:rtt`、`jlink:swo`、`openocd:semihosting`、`openocd:itm`、`probe-rs:rtt` 这几类候选观测后端。
## 命令
```bash
python <skill-dir>/scripts/workflow_plan.py --json
python <skill-dir>/scripts/workflow_run.py plan --json
python <skill-dir>/scripts/workflow_run.py build --json
python <skill-dir>/scripts/workflow_run.py build-flash --json
python <skill-dir>/scripts/workflow_run.py build-debug --json
python <skill-dir>/scripts/workflow_run.py observe --json
python <skill-dir>/scripts/workflow_run.py diagnose --json
```
## 配置说明
workflow 不再维护独立的工程配置结构,所有工程参数统一从 `.embeddedskills/config.json` 读取。
### 配置结构
`.embeddedskills/config.json` 中的 `workflow` 段仅包含首选后端配置:
```json
{
"workflow": {
"preferred_build": "auto",
"preferred_flash": "auto",
"preferred_debug": "auto",
"preferred_observe": "auto"
}
}
```
workflow 通过读取 `.embeddedskills/config.json` 中其他 skill 的配置段来获取工程参数(如 `keil.project`、`eide.project`、`eide.config`、`jlink.device`、`probe-rs.chip` 等)。
### 参数解析顺序
按以下决策树依次判断,命中即停止:
1. **CLI 参数**(优先级最高)
- 条件:用户在命令行传入 `--build-backend`、`--flash-backend` 等参数
- 示例:`workflow_run.py build-flash --build-backend=keil --flash-backend=jlink`
- `--build-backend` 可选值:`auto` / `keil` / `gcc` / `eide`
- 行为:直接使用该参数指定的后端,跳过后续步骤
2. **配置文件**(次优先)
- 条件:CLI 未指定,且 `.embeddedskills/config.json` 的 `workflow` 段中对应 `preferred_*` 字段不为 `"auto"`
- 示例:`"preferred_build": "keil"` → 使用 keil 作为构建后端
- 行为:读取配置值并使用,跳过自动发现
3. **自动发现**(兜底)
- 条件:CLI 未指定,且配置中 `preferred_*` 为 `"auto"` 或字段缺失
- 示例:`"preferred_flash": "auto"` → 扫描 workspace 自动推断可用 flash 后端
- 行为:枚举候选后端列表;若唯一则直接使用,若多个则返回列表请用户确认
成功执行后,实际使用的后端会自动写回 `.embeddedskills/config.json` 的 `workflow` 段。
## 规则
- 发现多个工程或多个候选后端时,只返回候选列表,不自动猜测
- 构建、烧录、调试、观测之间优先通过 `.embeddedskills/state.json` 串联
- `observe` 只生成推荐命令,不在 workflow 内直接长时间占用观测通道
- 失败时优先返回哪个阶段失败,以及底层脚本的结构化错误
- workflow 与其他 Skill 的协同只通过 `.embeddedskills/config.json`、`.embeddedskills/state.json` 和子进程调用底层 SkillExcerpt, first 2,451 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 674ae8b
git clone https://github.com/zhinkgit/embeddedskills git -C embeddedskills checkout 674ae8bca880
The author documents no install command, so this uses the repository directly. Our verdict covers commit 674ae8bca880 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
674ae8bca880
Similar skills
All automation skills →zhinkgit/embeddedskills
嵌入式串口调试工具,用于扫描串口、实时监控、发送数据、记录日志和 Hex 查看。 当用户提到串口、COM 口、UART、AT 命令调试、波特率、Hex 串流、串口抓日志、 串口监控、查看 MCU 输出、二进制协议联调时自动触发,也兼容 /serial 显式调用。 即使用户只是说"看看串口输出"、"发个 AT 命令"或"抓一下日志",只要上下文涉及 串口通信就应触发此 skill。
zhinkgit/embeddedskills
SSH/服务器操作助手。用于远程服务器、user@host、SSH 配置、上传下载、部署、跳板机、隧道、端口转发、服务器命令执行等任务;以 ~/.ssh/config 的 Host 别名为唯一服务器清单,优先密钥认证,通过本 skill 的 Python 脚本封装 OpenSSH 操作。
zhinkgit/embeddedskills
双向交互终端会话工具,用于串口终端、SSH 交互 Shell、本地 Shell、设备控制台、AT/CLI 菜单、需要保持上下文的交互式调试;当用户提到交互终端、串口终端、SSH 终端、打开 shell、发送命令后继续读输出、保持会话、登录后操作、菜单式命令行时触发,也兼容 /terminal 显式调用。
zhinkgit/embeddedskills
probe-rs 下载与调试工具,用于探针发现、固件烧录、复位、内存读写、GDB Server 调试和 RTT 日志读取。 当用户提到 probe-rs、cargo-embed、DAP、RTT、CMSIS-DAP、ST-Link、J-Link、烧录、芯片信息、 连接 under reset、probe 选择器、probe-rs gdb、probe-rs attach 时自动触发,也兼容 /probe-rs 显式调用。…
zhinkgit/embeddedskills
OpenOCD 下载与调试工具,用于探针探测、固件烧录、Flash 擦除、GDB Server 启动、目标复位控制、 Telnet 在线调试(halt/resume/step/寄存器/内存/断点)、GDB 源码级调试,以及 Semihosting/ITM 输出捕获和底层查询。 当用户提到 OpenOCD、ST-Link、CMSIS-DAP、DAPLink、FTDI、烧录固件、擦除 Flash、GDB Server、…
zhinkgit/embeddedskills
嵌入式网络调试工具,用于发现接口、抓包、分析 pcap/pcapng、做连通性测试、端口扫描和流量统计。 当用户提到 Wireshark、tshark、Npcap、抓包、网络联调、端口扫描、连通性排查、pcap 分析、 网络接口、ping 测试、traceroute、流量统计、Modbus TCP、EtherNet/IP 等网络协议调试时自动触发, 也兼容 /net…
Questions about workflow
What does the workflow skill do?
Is workflow safe to install?
What can workflow access on my machine?
How current is this page?
Sources
- github.com/zhinkgit/embeddedskills/tree/main/workflow — the audited source at commit 674ae8bca880 and every finding aboveObserved · 28 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the workflow skill do?
- Is workflow safe to install?
- What can workflow access on my machine?