data-flows
Installation
SKILL.md
Data Flow Mapping
Trace how data moves through the application from input to storage to output. Identify trust boundary crossings, encryption/decryption points, serialization steps, and data transformation operations. Produces annotated data flow maps with security observations at each transition.
Supported Flags
Read ../../shared/schemas/flags.md for the full flag specification.
| Flag | Data Flow Behavior |
|---|---|
--scope |
Default full. Data flow mapping requires broad visibility. Narrow scopes trace only flows touching scoped files. |
--depth quick |
Entry points and data stores only, no intermediate tracing. |
--depth standard |
Trace major data paths from input through processing to storage/output. |
--depth deep |
Full taint analysis: every transformation, validation, and boundary crossing. |
--depth expert |
Deep + annotate with threat categories, identify covert channels, DREAD scoring on flow weaknesses. |
--format |
Default text. Use md for Mermaid diagrams, json for structured flow graph. |