Install
$ agentstack add skill-lumiogames-workflow-plugin-workflow-dependencies ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
workflow-dependencies — 依赖分析与关系补全
本技能读取线上单据或 .workflow-drafts//,输出依赖 DAG、上下游链、当前阻塞 链和待写入关系。manifest 只代表当前提单批次;线上已有单据和关系是长期真相。先读取 [dependency-model.md](references/dependency-model.md) 与 [relation-provider.md](../workflow-ops/references/relation-provider.md)。需要线上写入时 转 [workflow-upload](../workflow-upload/SKILL.md),不绕过权限模式直接调用 API。
流程
- 读取草稿/单据正文、评论、附件元数据、验收项和已有关系;按共享搜索规则做项目级全局搜索。新蓝图分析当前 batch 的全量拆解,增量 bundle 只分析新增卡和新增/变更关系,并读取它们引用的远端单据。
- 解析 displayKey、UUID、本地 ID、深链和明确的“依赖/阻塞/前置”语句。
- 用模型补全语义关系;每条关系必须同时写入证据片段、来源位置、推断方式和置信度,并标明它是消费接口/公共产出,还是确实必须等待最终实现。
- 规范方向为“上游/前置 -> 下游/后继”,去重并检查自环、环、孤儿或跨项目引用。
- 计算传递闭包、根节点、叶节点、完整关系链和当前阻塞链;同时报告最长路径上的执行卡数
(longestChainCards) 与资源范围不冲突的最大可并行 wave (parallelWidth)。阻塞链按边的 basis 分流:接口边核对冻结合同/公共产物引用,implementation 边才使用 workflow 返回的 semantic、isTerminal 和验收通过语义,不硬编码状态名。
- 将所有可解析的直接边写入 manifest(当前 bundle)的边清单。普通消费边必须有版本化接口/公共产出引用;实现前置边仅允许收尾/联调、发布或迁移,并保留
basis、reason和unblockCondition。Requirement direct edge 交给
bindRequirementReference 对应的原生 Provider;WorkItem edge 交给 schedule relations。 按当前权限模式决定后续上传方式;不逐边询问。环、跨项目、无法唯一解析的引用和权限/并发 冲突是硬阻塞。无向 references 只表达关联存在,不能把它当成依赖方向。
输出
写入同一 bundle 的 analysis.json,并向用户报告:直接边、传递链、阻塞节点、证据、置信度、 公共接口引用、longestChainCards、parallelWidth、Provider 能力和仍需处理的阻塞。审查 结果至少标为 conditional、ready 或 blocked:条件化卡可继续讨论但不得派工/上传, 阻塞卡可补记关系但不得开始执行。Requirement 引用通过 GET /api/v1/requirement-graph 读回,但图谱的 source / target 是无向展示顺序;分析结果不代表依赖方向已经线上落库。 只有上传器完成 Provider 读回后才能报告原生引用已建立。
边界
只处理 Workflow PM 对象之间的关系。代码依赖图、需求图谱 UI、自动修改代码和自动删除已有 关系均不在本技能范围。
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: LumioGames
- Source: LumioGames/workflow-plugin
- License: MIT
- Homepage: https://workflow.games
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.