Flow Setup
Use when initializing Flow in a repo, configuring .agents, installing or checking Beads bd, setting local-only sync policy, or creating first project context files.
Install
$ agentstack add skill-cofin-flow-flow-setup ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-cofin-flow-flow-setup) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Flow Setup
Use this lifecycle skill for project initialization, installation checks, setup validation, and first context files.
> Beads mode: Skip every bd invocation when the SessionStart hook reports Beads Backend: Missing (None) or Disabled via plugin config (useBeads=false). Treat spec.md markers as fallback source of truth and skip /flow:sync. Never halt for missing Beads. See ../flow/references/discipline.md.
Workflow
- Detect project root, existing
.agents/state, Beads availability, and repo-native commands. - If Beads is missing, offer official Beads (
bd) installation or no-Beads degraded mode. - Initialize Flow context files from templates and prefer local-only Beads settings.
- Store setup decisions in Beads notes when a backend exists.
- Re-run setup validation before handing off to planning.
Guardrails
- Prefer
.git/info/excludefor local-only ignores. - Do not edit
.gitignoreunless the user wants shared repository policy. - Do not run
bd dolt push,bd export, or auto-stage unless policy explicitly allows it. - Keep setup idempotent; preserve existing user context files and merge rather than overwrite.
Validation
- Confirm
.agents/root,workflow.md,patterns.md,knowledge/index.md, and Beads config existence when setup is expected. - Confirm Beads config defaults are local-only: no git ops, no auto export, and no auto git add.
- Run repository validation commands documented in
.agents/workflow.mdor hook context.
References Index
- [Setup command details](../flow/references/setup.md)
- [Validate command details](../flow/references/validate.md)
- [Refresh command details](../flow/references/refresh.md)
Example
User: "Use Flow to set up this repo."
Action: detect the repo root, initialize .agents/, configure local-only Beads, capture setup notes, validate files, then hand off to flow-planning for the first flow.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: cofin
- Source: cofin/flow
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.