claude-to-deerflow

Interact with DeerFlow AI agent platform via its HTTP API. Use this skill when the user wants to send messages or questions to DeerFlow for research/analysis, s

63/100

Security score

The claude-to-deerflow skill was audited on Mar 11, 2026 and we found 5 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 27

Template literal with variable interpolation in command context

SourceSKILL.md

27	\| `DEERFLOW_GATEWAY_URL` \| `${DEERFLOW_URL}` \| Gateway API base (models, skills, memory, uploads) \|

high line 28

Template literal with variable interpolation in command context

SourceSKILL.md

28	\| `DEERFLOW_LANGGRAPH_URL`\| `${DEERFLOW_URL}/api/langgraph` \| LangGraph API base (threads, runs) \|

medium line 32

Template literal with variable interpolation in command context

SourceSKILL.md

```bash

low line 26

External URL reference

SourceSKILL.md

26	\| `DEERFLOW_URL` \| `http://localhost:2026` \| Unified proxy base URL \|

low line 34

External URL reference

SourceSKILL.md

34	DEERFLOW_URL="${DEERFLOW_URL:-http://localhost:2026}"

Scanned on Mar 11, 2026

View Security Dashboard