workflow-runner

workflow-runner is a skill for Claude Code from jnMetaCode/superpowers-zh. It costs 61 tokens per session (1,728 once invoked), scanned A, original, MIT.

A procedure for running agency-orchestrator YAML workflows directly inside Claude Code, OpenClaw, or Cursor. The current AI session performs each named role, so no separate API key is needed.

In plain words
What is it for?
Executing a provided `.yaml` workflow or handling requests that require several roles to collaborate, such as a product manager and architect reviewing a PRD.
Why use it?
It lets a user coordinate several role-based tasks from one coding-assistant session while respecting inputs, dependencies, conditions, and available role files.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions Claude Code; built for openclaw.

Part of the superpowers-zh plugin — 21 skills, 1 hook shipped together

not rated 8.4krepo +43 2d ago A scan Socket: passSnyk: passSkillSpector: pass 61 tokens original MIT

Good fit Executing a provided .yaml workflow or handling requests that require several roles to collaborate, such as a product manager and architect reviewing a PRD.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/jnmetacode/superpowers-zh/workflow-runner
About the project

superpowers-zh is a Chinese community edition of superpowers, a collection of practical skills and development methods for AI coding tools. It helps users apply workflows such as brainstorming, test-driven development, debugging, code review, and other programming tasks across supported coding agents. The catalogue add-ons are the project's translated and original skills, instructions, hook, and plugin components.

jnMetaCode/superpowers-zh · 8,405 stars · on GitHub · sp.aiolaola.com

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add jnMetaCode/superpowers-zh --skill workflow-runner
Clone the repo
git clone --depth 1 https://github.com/jnMetaCode/superpowers-zh

Made for: Claude Code.

Or install superpowers-zh, the plugin that ships this one along with the rest of its 21 skills, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for workflow-runner

README.md
[![agentmods](https://agentmods.dev/badge/skills/jnmetacode/superpowers-zh/workflow-runner/github.svg)](https://agentmods.dev/skills/jnmetacode/superpowers-zh/workflow-runner)
Your own site
<a href="https://agentmods.dev/skills/jnmetacode/superpowers-zh/workflow-runner"><img src="https://agentmods.dev/badge/skills/jnmetacode/superpowers-zh/workflow-runner/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for workflow-runner

Your own site · 80×15
<a href="https://agentmods.dev/skills/jnmetacode/superpowers-zh/workflow-runner"><img src="https://agentmods.dev/badge/skills/jnmetacode/superpowers-zh/workflow-runner.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 61 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,728 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Socket pass 15 Sept 2026
  • Snyk pass 15 Sept 2026
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00061 $0.01728
Opus 5.5 $0.00024 $0.00691
Sonnet 5.5 $0.00012 $0.00346
Haiku 4.5 $0.00006 $0.00173

Measured 1mo ago against content hash 445b25e66a8a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

workflow-runner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

2 near-identical copies found in the catalogue:

skills/workflow-runner/SKILL.md · 178 lines

How it starts

The opening of the file, as written. The whole thing — 178 lines — stays where its author put it; the contents beside it link to each section on GitHub.

工作流执行器:在 AI 工具内运行多角色编排

直接在当前会话中执行 agency-orchestrator 的 YAML 工作流,无需配置 API key。当前 LLM 就是执行引擎——依次扮演每个角色完成任务。

适用场景

  • 用户提供了一个 .yaml 工作流文件(如 运行 workflows/story-creation.yaml)
  • 用户要求多个角色协作完成任务(如"用产品经理和架构师一起评审这个 PRD")
  • 用户安装了 agency-agents-zh 并希望直接在 AI 工具内编排多角色

执行流程(5 步)

按以下顺序执行,不要跳步:

第 1 步:解析工作流

用 Read 工具读取用户指定的 YAML 文件,提取以下字段:

name: "工作流名称"
agents_dir: "agency-agents-zh"    # 角色定义目录
inputs:                            # 输入变量
  - name: xxx
    required: true/false
    default: "默认值"
steps:                             # 执行步骤
  - id: step_id
    role: "category/agent-name"    # 角色路径
    task: "任务描述 {{变量}}"       # 支持模板变量
    output: variable_name          # 输出变量名
    depends_on: [other_step_id]    # 依赖关系

忽略 llm、concurrency、timeout、retry 配置——Skill 模式使用当前会话的 LLM,这些字段仅用于 CLI 模式。

定位角色目录:用 Bash test -d 按以下顺序检查,用第一个存在的:

  1. 当前工作目录下的 {agents_dir}/(如 ./agency-agents-zh/)
  2. ../{agents_dir}/(上级目录)
  3. 相对于 YAML 文件所在目录的 {agents_dir}/
  4. node_modules/agency-agents-zh/

如果全部找不到,停止执行并提示用户:

找不到角色目录。请先安装:
  git clone --depth 1 https://github.com/jnMetaCode/agency-agents-zh.git
  或:npm install agency-agents-zh

第 2 步:收集输入

  • 对每个 required: true 的输入,检查用户消息中是否已提供值
  • 未提供的必填输入:立即向用户询问,不要猜测或用空值
  • 有 default 的可选输入:使用默认值
  • 无默认值的可选输入:设为空字符串

第 3 步:构建执行顺序

根据 depends_on 进行拓扑排序,将步骤分成多个层级:

  • 无 depends_on 的步骤 → 第 1 层
  • depends_on 全部在第 N 层或之前的步骤 → 第 N+1 层
  • 同一层内的步骤互不依赖,可并行

在回复中展示执行计划:

执行计划(共 N 步):
  第 1 层: [step_id] — 角色名
  第 2 层: [step_a, step_b] — 并行
  第 3 层: [step_id] — 角色名

第 4 步:逐层执行

对每一层:

4a. 预读角色文件

用 Read 工具读取该层所有步骤的角色 .md 文件:{角色目录}/{role}.md

从文件中提取:

  • 角色名:frontmatter 中的 name 字段
  • 角色 system prompt:第二个 --- 之后的全部 markdown 内容
4b. 渲染 task 模板

将 task 中的 {{变量名}} 替换为:

  • 来自 inputs 的用户输入值
  • 来自前序步骤 output 的结果文本
4c. 执行

单步骤层:直接在主会话中扮演该角色执行。格式:

### Step N/Total: step_id(角色名)

[以该角色身份完成 task,使用角色的专业知识和沟通风格]

多步骤层(并行):使用 Agent 工具为每个步骤启动子代理。每个子代理的 prompt 必须包含:

  • 角色文件的完整文本内容(不是路径——子代理可能无法读文件)
  • 渲染后的 task 文本
  • 指令:"以上是你的角色定义,请以该角色身份完成以下任务,直接输出结果"

Read the full file on GitHub · 178 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 178 lines · 61 tokens per session scan A 445b25e66a8a

Subscribe to this mod's changes

workflow-runner is a skill published in the GitHub repository jnMetaCode/superpowers-zh (8,405 stars, last pushed 2d ago), licensed MIT. It adds 61 tokens to every session and 1,728 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

cocos-creator-bundle

A guide to splitting a Cocos Creator game into separately loaded resource bundles. A bundle is a packaged group of files, such as a scene, interface, sound, or shared resource.

Wade-DevCode/awesome-coding-skills-cn · 32 tokens

cocos-creator-drawcall

A set of performance rules for Cocos Creator games focused on reducing draw calls, the number of separate rendering operations performed for a frame.

Wade-DevCode/awesome-coding-skills-cn · 32 tokens

cocos-creator-hotupdate

A guide to updating a Cocos Creator game's scripts, resources, or settings after release, without submitting a new app-store version. It covers version files, partial downloads, checks, and rollback.

Wade-DevCode/awesome-coding-skills-cn · 32 tokens

cocos-creator-tween-anim

Guidance for creating and managing animations in Cocos Creator, a game-development tool. It covers tweens, frame and Spine skeletal animations, performance, and cleanup when objects are destroyed.

Wade-DevCode/awesome-coding-skills-cn · 33 tokens

cocos-creator-ui-list

A Cocos Creator method for displaying long lists efficiently in games. Cocos Creator is a game-development tool, and a virtual list creates only the rows currently visible instead of every row.

Wade-DevCode/awesome-coding-skills-cn · 27 tokens

cocos-creator

A set of guidelines for writing Cocos Creator game components in TypeScript. Cocos Creator is a game engine where scenes contain nodes, components, prefabs, events, and managed resources.

Wade-DevCode/awesome-coding-skills-cn · 29 tokens