workflow-runner

workflow-runner is a skill for Claude Code, Codex from jnMetaCode/superpowers-zh. It costs 61 tokens per session (1,728 once invoked), scanned A, original, MIT.

A procedure for running agency-orchestrator YAML workflows directly inside Claude Code, OpenClaw, or Cursor. The current AI session performs each named role, so no separate API key is needed.

In plain words
What is it for?
Executing a provided `.yaml` workflow or handling requests that require several roles to collaborate, such as a product manager and architect reviewing a PRD.
Why use it?
It lets a user coordinate several role-based tasks from one coding-assistant session while respecting inputs, dependencies, conditions, and available role files.

Skill for Claude CodeCodex

Part of the superpowers-zh plugin — 20 skills, 1 hook shipped together

About the project

superpowers-zh is a Chinese community edition of superpowers, a collection of practical skills and development methods for AI coding tools. It helps users apply workflows such as brainstorming, test-driven development, debugging, code review, and other programming tasks across supported coding agents. The catalogue add-ons are the project's translated and original skills, instructions, hook, and plugin components.

jnMetaCode/superpowers-zh · 7,965 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/jnmetacode/superpowers-zh/workflow-runner
Any agent
npx skills add jnMetaCode/superpowers-zh --skill workflow-runner
Clone the repo
git clone --depth 1 https://github.com/jnMetaCode/superpowers-zh

Made for: Claude Code, Codex.

Or install superpowers-zh, the plugin that ships this one along with the rest of its 20 skills, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for workflow-runner

README.md
[![agentmods](https://agentmods.dev/badge/skills/jnmetacode/superpowers-zh/workflow-runner.svg)](https://agentmods.dev/skills/jnmetacode/superpowers-zh/workflow-runner)
Your own site
<a href="https://agentmods.dev/skills/jnmetacode/superpowers-zh/workflow-runner"><img src="https://agentmods.dev/badge/skills/jnmetacode/superpowers-zh/workflow-runner.svg" alt="Measured on agentmods" height="20"></a>
Per session 61 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,728 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00061 $0.01728
Opus 5 $0.00030 $0.00864
Sonnet 5 $0.00012 $0.00346
Haiku 4.5 $0.00006 $0.00173

Measured 5d ago against content hash 445b25e66a8a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

workflow-runner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

2 near-identical copies found in the catalogue:

skills/workflow-runner/SKILL.md · 178 lines

How it starts

The opening of the file, as written. The whole thing — 178 lines — stays where its author put it; the contents beside it link to each section on GitHub.

工作流执行器:在 AI 工具内运行多角色编排

直接在当前会话中执行 agency-orchestrator 的 YAML 工作流,无需配置 API key。当前 LLM 就是执行引擎——依次扮演每个角色完成任务。

适用场景

  • 用户提供了一个 .yaml 工作流文件(如 运行 workflows/story-creation.yaml
  • 用户要求多个角色协作完成任务(如"用产品经理和架构师一起评审这个 PRD")
  • 用户安装了 agency-agents-zh 并希望直接在 AI 工具内编排多角色

执行流程(5 步)

按以下顺序执行,不要跳步:

第 1 步:解析工作流

用 Read 工具读取用户指定的 YAML 文件,提取以下字段:

name: "工作流名称"
agents_dir: "agency-agents-zh"    # 角色定义目录
inputs:                            # 输入变量
  - name: xxx
    required: true/false
    default: "默认值"
steps:                             # 执行步骤
  - id: step_id
    role: "category/agent-name"    # 角色路径
    task: "任务描述 {{变量}}"       # 支持模板变量
    output: variable_name          # 输出变量名
    depends_on: [other_step_id]    # 依赖关系

忽略 llmconcurrencytimeoutretry 配置——Skill 模式使用当前会话的 LLM,这些字段仅用于 CLI 模式。

定位角色目录:用 Bash test -d 按以下顺序检查,用第一个存在的:

  1. 当前工作目录下的 {agents_dir}/(如 ./agency-agents-zh/
  2. ../{agents_dir}/(上级目录)
  3. 相对于 YAML 文件所在目录的 {agents_dir}/
  4. node_modules/agency-agents-zh/

如果全部找不到,停止执行并提示用户:

找不到角色目录。请先安装:
  git clone --depth 1 https://github.com/jnMetaCode/agency-agents-zh.git
  或:npm install agency-agents-zh

第 2 步:收集输入

  • 对每个 required: true 的输入,检查用户消息中是否已提供值
  • 未提供的必填输入:立即向用户询问,不要猜测或用空值
  • default 的可选输入:使用默认值
  • 无默认值的可选输入:设为空字符串

第 3 步:构建执行顺序

根据 depends_on 进行拓扑排序,将步骤分成多个层级:

  • 无 depends_on 的步骤 → 第 1 层
  • depends_on 全部在第 N 层或之前的步骤 → 第 N+1 层
  • 同一层内的步骤互不依赖,可并行

在回复中展示执行计划:

执行计划(共 N 步):
  第 1 层: [step_id] — 角色名
  第 2 层: [step_a, step_b] — 并行
  第 3 层: [step_id] — 角色名

第 4 步:逐层执行

对每一层:

4a. 预读角色文件

用 Read 工具读取该层所有步骤的角色 .md 文件:{角色目录}/{role}.md

从文件中提取:

  • 角色名:frontmatter 中的 name 字段
  • 角色 system prompt:第二个 --- 之后的全部 markdown 内容
4b. 渲染 task 模板

将 task 中的 {{变量名}} 替换为:

  • 来自 inputs 的用户输入值
  • 来自前序步骤 output 的结果文本
4c. 执行

单步骤层:直接在主会话中扮演该角色执行。格式:

### Step N/Total: step_id(角色名)

[以该角色身份完成 task,使用角色的专业知识和沟通风格]

多步骤层(并行):使用 Agent 工具为每个步骤启动子代理。每个子代理的 prompt 必须包含:

  • 角色文件的完整文本内容(不是路径——子代理可能无法读文件)
  • 渲染后的 task 文本
  • 指令:"以上是你的角色定义,请以该角色身份完成以下任务,直接输出结果"

Read the full file on GitHub · 178 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 178 lines · 61 tokens per session scan A 445b25e66a8a

Subscribe to this mod's changes

workflow-runner is a skill published in the GitHub repository jnMetaCode/superpowers-zh (7,965 stars, last pushed 2d ago), licensed MIT. It adds 61 tokens to every session and 1,728 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.