flow-bio — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited flow-bio (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
ClawBio's gateway to the Flow.bio platform — browse, search, upload, and launch bioinformatics pipelines on Flow from the command line.
Flow.bio is a bioinformatics platform hosting curated Nextflow pipelines with managed compute, sample tracking, and collaborative project management. But interacting with Flow requires navigating the web UI or writing custom API scripts.
Flow Bio Bridge makes the platform agent-accessible: authenticate once, then list pipelines, upload samples, launch executions, and poll for results — all from the CLI or via the ClawBio orchestrator.
| Format | Extension | Required Fields | Example |
|---|---|---|---|
| FASTQ (single-end) | .fq, .fastq, .fq.gz | reads1 | sample_R1.fastq.gz |
| FASTQ (paired-end) | .fq, .fastq, .fq.gz | reads1, reads2 | sample_R1.fastq.gz, sample_R2.fastq.gz |
| Any data file | any | — | annotation, reference, BED, etc. |
When the user asks to interact with Flow.bio:
# Login (stores token for subsequent calls)
python skills/flow-bio/flow_bio.py --login --username USER --password PASS
python skills/flow-bio/flow_bio.py --login --token TOKEN
# Discovery
python skills/flow-bio/flow_bio.py --pipelines
python skills/flow-bio/flow_bio.py --samples
python skills/flow-bio/flow_bio.py --projects
python skills/flow-bio/flow_bio.py --organisms
python skills/flow-bio/flow_bio.py --sample-types
python skills/flow-bio/flow_bio.py --executions
python skills/flow-bio/flow_bio.py --data
# Inspect details
python skills/flow-bio/flow_bio.py --execution EXEC_ID
python skills/flow-bio/flow_bio.py --sample SAMPLE_ID
python skills/flow-bio/flow_bio.py --pipeline PIPELINE_ID
# Inspect details via clawbio.py runner (uses --*-detail flags)
python clawbio.py run flow --execution-detail EXEC_ID
python clawbio.py run flow --sample-detail SAMPLE_ID
python clawbio.py run flow --pipeline-detail PIPELINE_ID
# Search
python skills/flow-bio/flow_bio.py --search "RNA-seq tumor"
# Raw JSON output (for piping to jq, etc.)
python skills/flow-bio/flow_bio.py --samples --json
# Upload sample
python skills/flow-bio/flow_bio.py --upload-sample \
--name "Tumour_01" --sample-type "RNA-Seq" \
--reads1 R1.fastq.gz --reads2 R2.fastq.gz \
--organism "Homo sapiens" --project PROJECT_ID
# Launch pipeline
python skills/flow-bio/flow_bio.py --run-pipeline PIPELINE_VERSION_ID \
--run-samples SAMPLE_ID1,SAMPLE_ID2 --output /tmp/flow_run
# Check execution status
python skills/flow-bio/flow_bio.py --execution EXEC_ID --output /tmp/flow_status
# Overview (public endpoints, no credentials needed)
python skills/flow-bio/flow_bio.py --demo --output /tmp/flow_demo
# Overview with authentication (shows owned samples, projects, executions)
python skills/flow-bio/flow_bio.py --demo --username USER --password PASS --output /tmp/flow_demo# Public overview (no credentials)
python skills/flow-bio/flow_bio.py --demo --output /tmp/flow_demo
# Full overview with account data
python skills/flow-bio/flow_bio.py --demo --username USER --password PASS --output /tmp/flow_demoExpected output: a live overview of the Flow.bio instance showing available pipelines, organisms, and sample types (public), plus owned samples, projects, and executions if authenticated.
/login with credentials → JWT token (5-min access, 7-day refresh)Authorization: Bearer <token> header?page=N) with lazy loading/executions/<id> until status reaches terminal stateKey parameters:
https://app.flow.bio/api (configurable via FLOW_URL)output_dir/
├── report.md # Summary of Flow API interaction
├── result.json # Machine-readable response data
└── reproducibility/
├── commands.sh # Exact CLI commands to reproduce
└── environment.yml # Flow instance URL, versionsRequired:
requests >= 2.28 — HTTP client for REST API callsOptional:
tqdm — progress bars during file upload (graceful degradation without it)Trigger conditions — the orchestrator routes here when:
Chaining partners:
rnaseq-de — Flow RNA-seq pipeline output → ClawBio differential expressiondiffviz — Flow DE results → ClawBio visualizationscrna-orchestrator — Flow Cell Ranger output → ClawBio scRNA analysisillumina-bridge — Illumina DRAGEN → Flow upload → pipeline execution~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.