bazhuayu-rpa-webhook_skill

Overview

This skill provides a secure webhook caller for Bazhuayu (Octoparse-like) RPA to trigger flows and pass custom parameters. It prioritizes environment-variable secrets, automatic signature calculation, and safe defaults so tasks can be invoked from scripts or CI reliably. The tool includes setup scripts, a secure-check command, and an option to run in test mode without sending requests.

How this skill works

The tool reads webhook URL, signing key, and optional parameter defaults from environment variables or a config file, then constructs the signed payload required by Bazhuayu RPA. It computes the HmacSHA256-based signature (timestamp + "\n" + key -> Base64) automatically, sends the HTTP request, and returns parsed success or error responses. Built-in commands let you run tasks, run with explicit parameters, view configuration, and perform a security audit without making network calls.

When to use it

• Trigger Bazhuayu RPA flows from scripts, cron jobs, or CI pipelines
• Pass dynamic parameters to an RPA job at runtime
• Test webhook invocation without executing the remote flow (test mode)
• Automate batch runs where signature and timestamp must be computed securely
• Verify webhook configuration and secrets using the secure-check command

Best practices

• Store BAZHUAYU_WEBHOOK_URL and BAZHUAYU_WEBHOOK_KEY in shell profile (~/.bashrc or ~/.zshrc) and avoid committing secrets to repo
• Prefer environment variables over config file values; use provided migrate-to-env.sh to convert old setups
• Run setup-secure.sh once to generate safe defaults and set file permissions to 600 for any local config file
• Use test mode before sending real requests to validate parameter names and values
• Keep system clock synchronized (NTP) to avoid timestamp/signature failures

Example use cases

• Call an RPA flow from a CI job passing build metadata as parameters to collect environment-specific data
• Schedule a nightly extraction by cron that triggers the webhook with date-range parameters
• Integrate with a monitoring alert to run a recovery or data collection RPA task with contextual parameters
• Use secure-check during onboarding to validate webhook URL, key, and environment variable setup before going live
• Run in test mode to confirm parameter names match the RPA application without starting a workflow