plugins/flow/skills/flow/SKILL.md
Use when a repository has .agents, when the user asks for Flow lifecycle routing, Beads-backed task memory, spec-first planning, TDD implementation, sync/status, review, finish, archive, or /flow:* help.
npx skillsauth add cofin/flow flowInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Flow coordinates Context-Driven Development in .agents/ repositories. Keep this skill small: use it to identify the active lifecycle phase, enforce the Beads-first invariants, and load the matching lifecycle skill.
Flow is a skill, not a CLI. There is no
flowexecutable. Never runflow,flow sync,flow prd, etc. as shell commands. Invoke this skill (or the matching lifecycle skill), or use the/flow:*slash commands where the host supports them.Beads mode: Skip every
bdinvocation when the SessionStart hook reportsBeads Backend: Missing (None)orDisabled via plugin config (useBeads=false). Treatspec.mdmarkers as fallback source of truth and skip/flow:sync. Never halt for missing Beads. Seereferences/discipline.md.
.agents/, Beads (bd), git branch, and repo-native commands.flow-setup.flow-planning.flow-execution.flow-sync-status.flow-completion..agents/workflow.md or hook context for validation.[ ], [~], [x], [!], [-]) manually in spec.md..agents/beads.json allows it or the user asks..agents/specs/<flow_id>/.bd note <id> "..." when work exceeds a quick fix.make validate-skills and make validate-codex-manifest after skill or command changes.User: "Use Flow to implement the current spec."
Action: load flow-execution, claim a ready Beads task, add investigation notes, follow TDD, close the task with evidence, then sync according to policy.
development
Use when tracing execution paths, mapping dependencies, understanding unfamiliar code, following data flow, investigating end-to-end behavior, debugging call chains, or deciding which files to read next.
development
Use when reviewing authentication, authorization, user input, secrets, API keys, database queries, file uploads, session management, external API calls, OWASP risks, or data handling attack surface.
testing
Use when analyzing tradeoffs, comparing approaches, weighing options, assessing risks, stress-testing conclusions, identifying blind spots, or applying multiple viewpoints to a decision.
development
Use when reviewing hot paths, slow code, database queries, N+1 risks, memory usage, loops, I/O, caching strategy, concurrency, latency-sensitive paths, or resource efficiency.