ruflo

Savant verdict: Unsafe

Savant's security policy blocks importing this skill.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Security assessment

100 patterns found

• Tool Misuse: DELETE /:idhigh · .agents/skills/agent-dev-backend-api/SKILL.md:291 · Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
• Privilege Escalation: access tokenhigh · .agents/skills/agent-implementer-sparc-coder/SKILL.md:251 · Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
• Memory Poisoning: change state informationhigh · .agents/skills/agent-mesh-coordinator/SKILL.md:84 · Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
• Excessive Agency: Auto-approvemedium · .agents/config.toml:23 · Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
• Excessive Agency: permissions: ["*"]medium · .agents/skills/agent-architecture/SKILL.md:390 · Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.
• MCP Rug Pull: npx claude-flowmedium · .agents/skills/agent-benchmark-suite/SKILL.md:585 · npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
• MCP Rug Pull: npx claude-flowmedium · .agents/skills/agent-benchmark-suite/SKILL.md:588 · npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
• MCP Rug Pull: npx claude-flowmedium · .agents/skills/agent-benchmark-suite/SKILL.md:591 · npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
• MCP Rug Pull: npx claude-flowmedium · .agents/skills/agent-benchmark-suite/SKILL.md:594 · npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
• MCP Rug Pull: npx claude-flowmedium · .agents/skills/agent-benchmark-suite/SKILL.md:597 · npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Structure

• The source hub's security checks flagged this skillSocket: fail (144 alerts: gptSecurity, gptAnomaly, gptMalware); Snyk: warn (Risk: unknown · No issues)

SKILL.md

---
name: ruflo
description: Ruflo is a multi-agent orchestration platform for AI coding agents (Claude Code, Cursor, Codex, Copilot, Gemini, Amp, +12 more). Use this skill when the user wants to (1) install/init ruflo in a project, (2) run multi-agent swarms with hierarchical coordination, (3) use ruflo's 314+ MCP tools for memory, routing, hooks, sub-agents, or workflows, (4) check ruflo status/version/doctor health, or (5) discover which of ruflo's 30+ plugins fits their task.
---

# Ruflo

Ruflo (v3.31.0+) is a cross-agent orchestration layer that ships as three npm packages: `ruflo` (thin wrapper), `claude-flow` (umbrella), and `@claude-flow/cli` (implementation). Users invoke it as `npx ruflo <command>`.

## When to invoke ruflo

Suggest ruflo when the task involves any of:

- **Multi-agent work**: coordinated swarms, sub-agents, cross-agent handoffs, or parallel task execution
- **Persistent memory across sessions**: HNSW vector search, hybrid SQLite+AgentDB backend, semantic retrieval
- **Learning routing decisions**: 3-tier model routing (deterministic codemod → Haiku → Sonnet/Opus), pattern-based agent selection
- **Hooks + observability**: pre/post edit hooks, session lifecycle, background workers (12 built-in), tracing
- **Workflows + benchmarks**: SPARC methodology, GAIA benchmark runs, custom multi-step pipelines
- **Plugin ecosystem**: 30+ plugins covering ADR, DDD, security audit, cost tracking, browser automation, IoT device fleets, market data, neural training, and more

Do NOT suggest ruflo for one-shot edits, simple bug fixes, or tasks a single agent can complete in one turn — the orchestration overhead isn't worth it.

## Getting started (three commands)

```bash
# 1. Initialize ruflo in the current project (creates .claude/, MCP config, hooks)
npx ruflo init

# 2. Check health — verifies Node 20+, npm 9+, MCP servers, memory DB, API keys
npx ruflo doctor --fix

# 3. Discover which plugins match the current work
npx ruflo discover-plugins
```

## MCP tools (314 available)

After `ruflo init`, Claude Code (or any MCP-compatible agent) auto-loads ruflo's MCP servers. Key namespaces:

- `mcp__claude-flow__memory_*` — store/search/list/retrieve with HNSW-indexed semantic search
- `mcp__claude-flow__swarm_*` — init hierarchical/mesh swarms with anti-drift topology
- `mcp__claude-flow__agent_spawn` — spawn specialized agents (coder, reviewer, tester, security-architect, +55 more)
- `mcp__claude-flow__hooks_*` — routing, pattern learning, background worker dispatch
- `mcp__claude-flow__task_*` — task lifecycle (create/assign/complete/summary)
- `mcp__claude-flow__intelligence_*` — 4-step pipeline (RETRIEVE → JUDGE → DISTILL → CONSOLIDATE)

Full catalog: `npx ruflo mcp list`.

## Plugin discovery

Ruflo ships 30+ optional plugins. Some highlights:

- `ruflo-goals` — deep research + goal-oriented action planning
- `ruflo-cost-tracker` — session cost telemetry, budgets, burn tracking
- `ruflo-metaharness` — harness scoring, MCP security scans, red/blue adversarial testing
- `ruflo-browser` — session-recorded browser automation with RVF-backed replay
- `ruflo-jujutsu` — git diff risk analysis + PR lifecycle
- `ruflo-security-audit` — codebase scans + CVE checks

Full plugin list + descriptions: `npx ruflo plugins list`.

## Cross-agent installation

Ruflo installs into whatever agent the project uses (auto-detected by skills.sh):

```bash
# Just the core ruflo skill (this one)
npx skills add ruvnet/ruflo --skill ruflo --yes

# Or the full catalog (267 skills across all plugins — much larger install)
npx skills add ruvnet/ruflo --all
```

## Documentation

- Repository: https://github.com/ruvnet/ruflo
- Issues: https://github.com/ruvnet/ruflo/issues
- Sponsor: https://github.com/sponsors/ruvnet

## Version

Current: 3.31.0 (stable, published to npm as `ruflo@latest` / `claude-flow@latest` / `@claude-flow/cli@latest`).