bazhuayu-webhook_skill

Overview

This skill triggers Bazhuayu (Octopus) RPA flows via webhook and supports passing custom parameters and secure signature generation. It centralizes webhook URL and key handling, prefers environment variables for secrets, and includes a secure setup and validation workflow. The tool is designed for CLI use with test, run, config and security-check commands.

How this skill works

The script reads webhook URL, signature key, and optional default parameters from config.json or environment variables, then computes the required HMAC-SHA256 signature and timestamp. It sends a properly signed POST to the Bazhuayu webhook endpoint with parameter payloads, and returns the API response (success batch IDs or structured error). Built-in commands allow dry-run testing and automated security checks before sending.

When to use it

• Automate triggering of Bazhuayu RPA flows from CI/CD pipelines or cron jobs
• Pass dynamic parameters to RPA tasks without modifying the RPA application
• Run safe, signed webhook calls when secrets must not be embedded in code
• Validate webhook configuration and signature behavior with a test mode
• Migrate older config files to environment-variable based secret management

Best practices

• Store BAZHUAYU_WEBHOOK_URL and BAZHUAYU_WEBHOOK_KEY in your shell profile or secrets manager, not in plaintext config files
• Prefer environment variables (higher priority) and use provided migrate-to-env.sh when upgrading
• Run secure-check before production runs to detect timestamp or key issues
• Use test mode to validate payload and signature without triggering real runs
• Restrict config.json file permissions to owner-only (script enforces 600)

Example use cases

• Trigger data extraction workflows nightly with parameterized date ranges from cron
• Invoke a scraping flow from CI after deployment to validate front-end changes
• Pass runtime parameters (A, B, etc.) from a monitoring or orchestration system to alter RPA behavior
• Use test command in staging to confirm signature and timestamp handling before production execution
• Migrate legacy config to environment variables and perform one-click secure setup with setup-secure.sh