Flowindex — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Flowindex (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
FlowIndex demo
File trees and embeddings tell you what exists. FlowIndex tells you what runs, what breaks, and what matters.
Behavior-first repository indexing for AI coding agents. FlowIndex maps how a codebase behaves: entrypoints, call paths, tests, runtime traces, and git history — so agents understand impact before editing code.
Most coding-agent tools index files, chunks, symbols, or embeddings. FlowIndex indexes behavior.
It answers questions like:
File trees and embedding search tell you what exists. They do not tell you what runs, what breaks, or what matters when you change a shared module.
FlowIndex builds a local, deterministic behavior graph:
No vector database. No LLM calls. No SaaS. Inspectable SQLite.
| Approach | FlowIndex |
|---|---|
| Repo maps / file trees | Behavior graph with entrypoints and call edges |
| Embeddings / RAG | Deterministic lexical + graph ranking |
| Agent frameworks | Developer tool that feeds agents context |
| Generic static analysis | Agent-oriented impact, tests-for, context packs |
pip install flowindexMCP support for Cursor / Claude Code:
pip install "flowindex[mcp]"From source:
git clone https://github.com/adu3110/flowIndex.git
cd flowIndex
pip install -e ".[dev]"cd your-project
flowindex init # use --here inside nested example dirs
flowindex scan
flowindex overview
flowindex explain "POST /api/payments"
flowindex impact src/services/ledger.py
flowindex tests-for update_ledger
flowindex context "fix duplicate payments when webhook retries"cd examples/python_fastapi_app
flowindex init --here
flowindex scan
flowindex context "fix duplicate payments when webhook retries"# Initialize index in current repo
flowindex init
# Scan and build behavior graph
flowindex scan
# Explain an entrypoint flow
flowindex explain "POST /payments"
# Analyze change impact
flowindex impact services/ledger.py
# Suggest tests for a change
flowindex tests-for services/ledger.py
# Generate agent context pack
flowindex context "fix webhook retry duplicate ledger entries"Add to Cursor MCP settings (~/.cursor/mcp.json or project settings):
{
"mcpServers": {
"flowindex": {
"command": "flowindex",
"args": ["mcp"],
"cwd": "/absolute/path/to/your/repo"
}
}
}Run flowindex init && flowindex scan in that repo first.
Start the server manually:
flowindex mcpTools: get_repo_overview, explain_entrypoint, get_change_impact, suggest_tests, make_context_pack, and more — see docs/mcp.md.
flowchart LR
subgraph ingest [Ingest]
Scan[File Scanner]
Py[Python Parser]
TS[TS/JS Parser]
Git[Git Analyzer]
end
subgraph index [Local Index]
DB[(SQLite)]
Graph[Behavior Graph]
end
subgraph out [Outputs]
CLI[CLI Commands]
MCP[MCP Server]
Pack[Context Packs]
end
Scan --> Py
Scan --> TS
Py --> Graph
TS --> Graph
Git --> Graph
Graph --> DB
DB --> CLI
DB --> MCP
DB --> Packflowindex context "fix duplicate payments when webhook retries"# FlowIndex Context Pack
## Task
fix duplicate payments when webhook retries
## Likely Relevant Entrypoints
- POST /payments
- POST /stripe/webhook
## Likely Relevant Files
- main.py
- services/ledger.py
- services/payments.py
## High-Risk Symbols
- update_ledger()
- handle_stripe_webhook()
## Tests to Run
- tests/test_payments.py
## Caution
- services/ledger.py has high change risk.
- update_ledger() is shared by refunds and payments.FlowIndex is a static-analysis tool, not a runtime tracer. Here is what works well and what is on the roadmap:
| Claim | Current reality |
|---|---|
| Behavior indexing | Static analysis + git co-change heuristics. Runtime traces not yet ingested. |
| Call paths | Cross-file resolution via import graph + named symbol matching. Not a full compiler-grade call graph. |
| Test selection | Name similarity, import edges, graph coverage links, co-change patterns. Not coverage-backed. |
| Git history | Scoped to the indexed repo root even inside monorepos. Commit relevance is keyword-matched, not coverage-tracked. |
| TS/JS support | Heuristic parser: functions, arrow functions, classes, class methods, qualified calls. Tree-sitter is on the roadmap. |
| Context packs | Import-aware file ranking. May miss files with no keyword match in their name. |
pip install -e ".[dev]"ruff check . && mypy flowindex && pytestSee docs/ for concepts, CLI reference, and examples.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.