Agent skill

Workflow

by openwpm in openwpm/OpenWPM

A skill your agent uses to walk the user through a guided policy review of the project's crosslink configuration — tracking mode, security policies, language rules, hook implementations, and…

Custom licenceAuto-check passed

Install Workflow

skills CLI
$ npx skills add openwpm/OpenWPM --skill workflow -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install openwpm/OpenWPM workflow --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/openwpm/OpenWPM.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/workflow .claude/skills/workflow && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
workflow
GitHub stars
1.4k
Token cost
~920 tokens
SKILL.md length
383 words
Files
1
Skills in repo
13
Repo updated
First seen
Licence
Custom licence

At a glance

A skill your agent uses to walk the user through a guided policy review of the project's crosslink configuration — tracking mode, security policies, language rules, hook implementations, and…

  • Works in 7 steps: Gather current state → Review tracking mode → Review security policies → …
  • Walk the user through a guided policy review of the projects crosslink configuration — tracking mode
  • SKILL.md covers Step 1: Gather current state, Step 2: Review tracking mode, Step 3: Review security policies and Step 4: Review language rules, plus 3 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Workflow is an agent skill from openwpm/OpenWPM. Use to walk the user through a guided policy review of the project's crosslink configuration — tracking mode, security policies, language rules, hook implementations, and workflow conventions. Identifies drift from defaults via crosslink workflow diff and offers targeted fixes or a crosslink init --force reset. Trigger when the user says "review the crosslink config", "audit the workflow policies", "/workflow", or asks whether the hook/rules setup is right.

Its SKILL.md is about 920 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

The repository describes itself as: A web privacy measurement framework.

When your agent uses it

  • Walk the user through a guided policy review of the projects crosslink configuration — tracking mode
  • Security policies
  • Hook implementations
  • Workflow conventions

Example prompts

  • “review the crosslink config”
  • “audit the workflow policies”
  • “/workflow”
  • “/workflow”

Workflow steps

7 steps, taken from the step headings in SKILL.md.

  1. Gather current state
  2. Review tracking mode
  3. Review security policies
  4. Review language rules
  5. Review hook implementations
  6. Review workflow conventions
  7. Summary and recommendations

What it can do on your machine

Read from SKILL.md and the folder at commit da628ba. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Workflow loads about 920 tokens when it runs. Until then it costs about 119 tokens; SKILL.md has 383 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~119
When it runs · the whole SKILL.md, loaded when a task matches
~920

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 383 words (~920 tokens).

“You are conducting a guided policy review of this project's crosslink configuration. Walk the user through each section, explain what's configured, and suggest improvements.”

— opening of SKILL.md by openwpm, Custom licence
name
workflow

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .claude/skills/workflow of openwpm/OpenWPM.

Open the folder on GitHubat commit da628ba

Compare with similar skills

Workflow next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Workflow compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Workflow this skillopenwpm/OpenWPM1.4k—~920Automated safety check: PassCustom licence
Implementing Policy As Code With Open Policy Agentmukul975/Anthropic-Cybersecurity-Skills34k—~2.6kAutomated safety check: NotesApache-2.0
Write Guidevercel/next.js143k—~1.6kAutomated safety check: PassMIT
Policy Acknowledgementsickn33/agentic-awesome-skills47k1 repos~3.4kAutomated safety check: PassMIT
Design Guidepaperclipai/paperclip99k1 repos~3.1kAutomated safety check: PassMIT
Write Guidesremix-run/remix33k—~2.6kAutomated safety check: PassMIT

Similar skills

  • Implementing Policy As Code With Open Policy Agent

    mukul975/Anthropic-Cybersecurity-Skills

    Implements policy-as-code enforcement with Open Policy Agent (OPA) and Gatekeeper for Kubernetes and CI/CD pipelines, covering writing Rego policies, deploying OPA Gatekeeper as a Kubernetes…

    34k GitHub stars~2.6k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check: notes
  • Write Guide

    vercel/next.js

    Official

    Generates technical guides that teach real-world use cases through progressive examples.

    143k GitHub stars~1.6k tokensUpdated today
    DevelopmentAuto-check passed
  • Policy Acknowledgement

    sickn33/agentic-awesome-skills

    Policy acknowledgement register: employee, policy and version, sent and due dates, acknowledged date and flag, days overdue, reminder sent and status.

    47k GitHub starsUsed in 1 repo~3.4k tokens
    Auto-check passed
  • Design Guide

    paperclipai/paperclip

    Paperclip UI design system guide for building consistent, reusable frontend components.

    99k GitHub starsUsed in 1 repo~3.1k tokens
    Frontend & DesignAuto-check passed
  • Write Guides

    remix-run/remix

    Write, rewrite, or audit Remix guide chapters in the voice of docs/guides/app/actions/docs/chapters/01-start-here.md.

    33k GitHub stars~2.6k tokensUpdated today
    Writing & ContentAuto-check passed
  • Privacy Policy

    thedaviddias/Front-End-Checklist

    A skill your agent uses when reviewing whether a website has a visible, accessible privacy policy link, particularly in the footer navigation.

    74k GitHub stars~617 tokensUpdated yesterday
    Legal & ComplianceAuto-check passed

More from openwpm/OpenWPM

All 13 skills in this repo
  • Crosslink Guide

    openwpm/OpenWPM

    A skill your agent uses when working in any repo that has .crosslink/ and the workflow involves issue tracking, sessions, locks, swarms, kickoff, or knowledge pages.

    1.4k GitHub starsUsed in 1 repo~4.1k tokens
    Auto-check passed
  • Audit

    openwpm/OpenWPM

    A skill your agent uses when stuck, confused, or disoriented in a crosslink-tracked project — dumps the full context (session state, active issue, locks, blockers, hook config, git state, project…

    1.4k GitHub stars~676 tokensUpdated 3 days ago
    Auto-check passed
  • Check

    openwpm/OpenWPM

    A skill your agent uses to check on background feature agents launched via /kickoff — running in tmux sessions or docker/podman containers.

    1.4k GitHub stars~1.5k tokensUpdated 3 days ago
    Auto-check passed
  • Commit

    openwpm/OpenWPM

    A skill your agent uses to create a jj commit AND auto-document the result on the active crosslink issue.

    1.4k GitHub stars~669 tokensUpdated 3 days ago
    Auto-check passed
  • Design

    openwpm/OpenWPM

    A skill your agent uses to author or iterate a feature design document grounded in actual codebase exploration.

    1.4k GitHub stars~1.9k tokensUpdated 3 days ago
    Auto-check passed
  • Featree

    openwpm/OpenWPM

    A skill your agent uses to create a feat/<slug bookmark AND spin up a new git worktree under <repo-root/.worktrees/<slug, then initialize crosslink hooks and an agent identity in the worktree so a…

    1.4k GitHub stars~846 tokensUpdated 3 days ago
    Auto-check passed

Questions about Workflow

What does Workflow do?

A skill your agent uses to walk the user through a guided policy review of the project's crosslink configuration — tracking mode, security policies, language rules, hook implementations, and…. Workflow is an agent skill from openwpm/OpenWPM. Use to walk the user through a guided policy review of the project's crosslink configuration — tracking mode, security policies, language rules, hook implementations, and workflow conventions.

When should I use Workflow?

Workflow fits situations like: walk the user through a guided policy review of the projects crosslink configuration — tracking mode; security policies; hook implementations; workflow conventions.

How do I install Workflow in Claude Code?

Run `npx skills add openwpm/OpenWPM --skill workflow -a claude-code`. Or copy the skill folder (.claude/skills/workflow in openwpm/OpenWPM) into .claude/skills/workflow in your project. Claude Code loads it when a task matches its description.

How do I install Workflow in Codex?

Run `npx skills add openwpm/OpenWPM --skill workflow -a codex`. Or copy the skill folder (.claude/skills/workflow in openwpm/OpenWPM) into .agents/skills/workflow in your project. Codex loads it when a task matches its description.

Can I use Workflow in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add openwpm/OpenWPM --skill workflow -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/workflow, .gemini/skills/workflow, .github/skills/workflow and .opencode/skills/workflow in your project.

What does Workflow need to run?

SKILL.md names no scripts, command-line tools or credentials: Workflow is instructions for the agent only.

Does Workflow access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Workflow safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Workflow use?

Workflow has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Workflow use?

About 920 tokens (SKILL.md is roughly 3.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Workflow?

Skills that share tags, products or a category with Workflow: Implementing Policy As Code With Open Policy Agent (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Write Guide (vercel/next.js, 143k stars), Policy Acknowledgement (sickn33/agentic-awesome-skills, 47k stars) and Design Guide (paperclipai/paperclip, 99k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Workflow?

openwpm (a GitHub organization) maintains it in openwpm/OpenWPM, which has 1,423 GitHub stars. The repository holds 13 skills in this directory. The repository was last updated on October 4, 2026.

Source: openwpm/OpenWPM on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.