Install
$ agentstack add skill-cofin-flow-flow ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Flow Router
Flow coordinates Context-Driven Development in .agents/ repositories. Keep this skill small: use it to identify the active lifecycle phase, enforce the Beads-first invariants, and load the matching lifecycle skill.
> Flow is a skill, not a CLI. There is no flow executable. Never run flow, flow sync, flow prd, etc. as shell commands. Invoke this skill (or the matching lifecycle skill), or use the /flow:* slash commands where the harness supports them. > > Beads mode: Skip every bd invocation when the SessionStart hook reports Beads Backend: Missing (None) or Disabled via plugin config (useBeads=false). Treat spec.md markers as fallback source of truth and skip /flow:sync. Never halt for missing Beads. See references/discipline.md.
Workflow
- Check hook-provided Flow context first; otherwise detect
.agents/, Beads (bd), git branch, and repo-native commands. - Route the request:
- Setup, validation, install, context initialization: use
flow-setup. - PRD, research, plan, refine, revise, task creation: use
flow-planning. - Implement, claim ready tasks, TDD, commit, task close: use
flow-execution. - Sync, status, refresh, cleanup, context drift: use
flow-sync-status. - Review, finish, archive, revert, docs, phase completion: use
flow-completion.
- Record durable discoveries and task state in Beads. Markdown files are synchronized views.
- Prefer repo-native commands from
.agents/workflow.mdor hook context for validation.
Guardrails
- Never edit task markers (
[ ],[~],[x],[!],[-]) manually inspec.md. - Do not run
bd export, auto-stage,bd dolt push, or git operations through Beads unless.agents/beads.jsonallows it or the user asks. - Store Flow specs and planning artifacts under
.agents/specs//. - Make minimal targeted changes and record findings with
bd note "..."when work exceeds a quick fix.
Validation
- For planning: verify the plan is decision-complete before presenting it.
- For implementation: verify red-green-refactor evidence, full relevant tests, and Beads task closure before claiming completion.
- For sync/status: read backend state first and report drift instead of guessing.
- For this repository: run
make validate-skillsandmake validate-codex-manifestafter skill or command changes.
References Index
- [Setup](../flow-setup/SKILL.md)
- [Planning](../flow-planning/SKILL.md)
- [Execution](../flow-execution/SKILL.md)
- [Sync and Status](../flow-sync-status/SKILL.md)
- [Completion](../flow-completion/SKILL.md)
- [Discipline](references/discipline.md)
Example
User: "Use Flow to implement the current spec."
Action: load flow-execution, claim a ready Beads task, add investigation notes, follow TDD, close the task with evidence, then sync according to policy.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: cofin
- Source: cofin/flow
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.