flow-next-setup
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs standard setup operations, including creating a local
.flow/directory, copying executable CLI scripts from the plugin's source directory, and setting file permissions usingchmod. These actions are confined to the local project environment. - [COMMAND_EXECUTION]: The workflow modifies project documentation files such as
CLAUDE.mdandAGENTS.mdto integrate task-tracking instructions. These modifications are based on provided templates and are intended to guide agent behavior for project management. - [COMMAND_EXECUTION]: A network-based action is included to star the project's repository on GitHub using the
ghCLI. This operation is explicitly gated by a user prompt and targets the author's official repository on a well-known service. - [COMMAND_EXECUTION]: The skill interacts with the
flowctlCLI tool to initialize state and manage configurations. These commands use local scripts distributed with the plugin and do not involve untrusted remote sources.
Audit Metadata