ruflo-status
Warn
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download the@claude-flow/clipackage from the public NPM registry at runtime. - [REMOTE_CODE_EXECUTION]: By invoking
npx @claude-flow/cli@latest, the skill executes code from a remote source. The use of the@latesttag means the code being executed can change at any time without user intervention. - [COMMAND_EXECUTION]: The skill executes diagnostic commands (
doctor,status) and potentially system-modifying commands (doctor --fix) via the downloaded CLI tool.
Audit Metadata