Skip to content
Back to skills

Workflows

ASecurity

Playbook for authoring, running, evaluating, and improving Gina sandbox workflows with safe defaults and repeatable operations.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
toolstypescriptbashsqldebuggingapisecurity

Works with

  • cli
  • api

Security analysis

A100/100

Pro scans all 5 files and shows the line behind each finding

Scanned November 11, 2026

npx -y skills add johnalbertini14-glitch/openclaw-skills --skill workflows --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Workflows?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Workflows
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/johnalbertini14-glitch-workflows/badge)](https://www.skillsdirectory.com/skills/johnalbertini14-glitch-workflows)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
id: workflows
name: "Workflows via Ask Gina"
description: "Playbook for authoring, running, evaluating, and improving Gina sandbox workflows with safe defaults and repeatable operations."
---

# Workflows via Ask Gina Skill

## What It Does

Provides a practical workflow-authoring and operations standard for Gina sandbox automation.

- Creates and validates workflow definitions.
- Runs workflows and inspects artifacts/logs.
- Applies a repeatable eval -> optimize -> compare loop.
- Uses safe TypeScript/SQL/KV patterns for step logic.

## When To Use

- You are creating or maintaining multi-step workflow orchestration.
- You need reproducible debugging from run artifacts.
- You want measurable improvements using baseline comparisons.

## When Not To Use

- The task is a single action with no orchestration requirement.
- You only need high-level strategy language without runnable steps.
- You cannot provide explicit permissions or side effects.

## Inputs

- Workflow intent and success criteria.
- Trigger definition and input schema.
- Required tools/data sources and permission scope.
- Optional baseline run ID for optimization.

## Outputs

- Validated workflow definition (`.ts`).
- Runnable execution with traceable artifacts.
- Evaluation record with baseline comparison.
- Clear rollback path for regressions.

## Core Commands

```bash
workflow create <id>
workflow validate <id>
workflow run <id> [--input JSON]
workflow status <run-id>
workflow logs <run-id> [--step <step-id>]
workflow eval <run-id>
workflow optimize <id> --baseline <run-id>
workflow rollback <id> <opt-run-id>
```

## Setup

1. Confirm workflow tooling is available (`workflow list` should succeed).
2. Scaffold or open the target workflow in `/workspace/.harness/workflows/`.
3. Keep active versions on `@latest.ts` naming when versioned variants exist.
4. Validate before every run: `workflow validate <id>`.
5. For risky changes, capture a baseline run and eval before editing.

## Capability Contract Checklist

For each workflow entry, explicitly define:

- Trigger.
- Inputs.
- Outputs.
- Side effects.
- Failure modes.
- Permission scope.

## Failure Modes

- Validation failure from malformed step definitions.
- Runtime errors in TS/SQL/Bash steps.
- Missing tool permissions or tool availability.
- Data shape changes causing parse/cast failures.
- Timeout/retry exhaustion in external calls.

## Security And Permissions

- Use least privilege by step using `allow` and `block`.
- Declare permissions in the submission contract (no wildcard permissions).
- Never include raw secrets in skill text, logs, or examples.
- Treat writes (files, KV, external posts, trading actions) as explicit side effects.

## Evidence Expectations

- Setup path that a reviewer can execute in under 10 minutes.
- One reproducible run artifact or run log example.
- Clear statement of expected outputs and acceptable failure behavior.

## Optional Directories

```text
workflows/
  SKILL.md
  references/   # implementation and API details
  scripts/      # optional helpers for repeatable checks
  assets/       # optional diagrams/screenshots
```

## Reference Material

Deep technical references are intentionally split out:

- `references/cli-and-definition.md`
- `references/eval-optimize-and-artifacts.md`
- `references/polymarket-patterns.md`

Use these as appendices while keeping this file focused on operational usage.

Files in this skill

  • SKILL.md3.3 KB
  • _meta.json454 B
  • references/cli-and-definition.md2.3 KB
  • references/eval-optimize-and-artifacts.md1 KB
  • references/polymarket-patterns.md1.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in tools →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.