flask — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited flask (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Flask is the feedback layer for video, built for the agentic loop: your agent uploads a render and shares the link instantly. The reviewer doesn't type - they hit record and talk through the video (voice, camera, screen, drawing on frames), and Flask turns the recording into structured, timestamped comments with transcripts. The agent reads that feedback and iterates, pushing each revision as a new version of the same asset. Typed comments work too - recordings are the advantage, not a requirement.
This plugin connects the Flask MCP server and teaches the agent the full review loop.
/plugin marketplace add enritarta/flask-plugin
/plugin install flask@flaskThen authenticate once: /mcp -> flask -> complete the browser sign-in.
No plugin manager? Connect the MCP server directly:
claude mcp add --transport http flask https://api.flask.do/api/mcp/mcp| Tool | What it does |
|---|---|
contents, search, recent_activity | Browse folders/assets, search, latest team feedback |
feedback_list, feedback_get | Read feedback with tags, timestamps, recording transcripts (transcript: "full" for whole recording) |
wait_for_feedback | Long-poll - returns new feedback the moment it's left |
upload_file_start / upload_file_complete | Upload a local video (5GB max) via presigned URL; share link available the instant the upload starts |
upload_video | Import from a public URL or Google Drive link |
version_of (param on uploads) | Upload as a new version of an existing asset - one stable link for the whole iteration |
asset_status, tags, permission_get | Processing status, tag distribution, folder access |
The server is read-only except for uploads - it can never edit or delete anything.
agent renders video -> upload_file_start -> user gets flask.do link instantly
user records feedback on the video -> wait_for_feedback returns it (transcribed)
agent implements changes -> uploads v2 with version_of -> same link shows v2This repo is kept in sync with the MCP server. Tool list and behavior described here mirror https://flask.do/mcp, which is the source of truth.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.