Skip to main content

flow-coordinator

Facilitates efficient workflow coordination through template-driven command execution, enhancing task management and automation.

Install this skill

or
50/100

Security score

The flow-coordinator skill was audited on Feb 9, 2026 and we found 10 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 47

Template literal with variable interpolation in command context

SourceSKILL.md
47const sessionId = `fc-${timestamp()}`;
medium line 48

Template literal with variable interpolation in command context

SourceSKILL.md
48const statusPath = `.workflow/.flow-coordinator/${sessionId}/status.json`;
medium line 230

Template literal with variable interpolation in command context

SourceSKILL.md
230`ccw cli -p "${escapePrompt(prompt)}" --tool claude --mode write`,
medium line 237

Template literal with variable interpolation in command context

SourceSKILL.md
237console.log(`Executing: ${step.cmd} (async)`);
medium line 238

Template literal with variable interpolation in command context

SourceSKILL.md
238console.log(`Resume: /flow-coordinator --resume ${status.id}`);
medium line 251

Template literal with variable interpolation in command context

SourceSKILL.md
251let prompt = `${step.cmd} -y`;
medium line 258

Template literal with variable interpolation in command context

SourceSKILL.md
258prompt += ` ${args}`;
medium line 264

Template literal with variable interpolation in command context

SourceSKILL.md
264prompt += `\n\nContext:\n${context}`;
medium line 269

Template literal with variable interpolation in command context

SourceSKILL.md
269prompt += `\n\nPrevious results:\n${previousContext}`;
medium line 345

Template literal with variable interpolation in command context

SourceSKILL.md
345const statusPath = `.workflow/.flow-coordinator/${sessionId}/status.json`;
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →