create-flow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-flow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Fast, safe flow construction for browser, GUI, and terminal work.
--root is given, the flow root is auto-detected from the current git repo.google/antigravity-gemini-3-flash directly.| Tier | Meaning | Promotion rule |
|---|---|---|
run | atomic action | 2 successes → 1 mini candidate |
mini | two proven runs | 10 clean candidates → approved mini |
low | two approved mini units | 10 clean candidates → approved low |
high | two approved low units | 10 clean candidates → approved high |
max | two approved high units | 10 clean candidates → approved max |
full | two approved max units | 10 clean candidates → full autorun |
<repo>/.opencode/flows/<flow-slug>/
├── brain.md
├── flow.md
├── state.json
├── evidence/
│ └── <step-id>/
│ ├── screenshot.png
│ ├── vision.txt
│ ├── analysis.json
│ └── analysis.md
└── archives/sin-flow init <flow> — scaffold a flow workspacesin-flow step — execute one action + screenshot + vision + brain logsin-flow keyshot — screenshot + vision only, writes the same analysis artifactssin-flow record — interactive one-action-at-a-time buildersin-flow batch — run a file of single-action stepssin-flow status — inspect promotion statesin-flow brain — rebuild the brain from evidencesin-flow archive — bundle evidence for review/handoffsin-flow guard --repo <path> — fail when a repo contains divergent create-flow runtime files outside the canonical SIN-InkogniFlow / upgraded-opencode-stack layouts--mode nodriver executes Python using an internal async context with nodriver boilerplate. It injects the flow_cdp_utils library automatically.--fast skips the Vision "Stop & Verify" pause to enable fluid execution (e.g. Mousedown -> Mouseup -> Click) for strict bot protections.flow_cdp_utils inside your nodriver script for robust float-scaling on Retina, exact mouse event dispatching, and Context-ID logic for incognito windows.guard_create_flow.py detects and blocks divergent create-flow runtime files in non-canonical repos.sin-flowd — local HTTP daemonsin-eye — optional ultra-fast vision backend when installedPOST /v1/flows — create workspacePOST /v1/flows/<slug>/step — run one stepPOST /v1/flows/<slug>/keyshot — capture + verify onlyGET /v1/flows/<slug>/status — current ladder statePOST /v1/flows/<slug>/brain — rebuild local brainPOST /v1/flows/<slug>/archive — archive evidenceRequired default:
opencode + google/antigravity-gemini-3-flashNo automatic fallback chain is used by default. If the flash path fails, the step fails fast instead of silently switching models.
FLOW_VISION_CMD remains available only for explicit operator overrides.
python3 ~/.config/opencode/skills/create-flow/scripts/create-flow.py "My Flow" --root .
python3 ~/.config/opencode/skills/create-flow/scripts/sin-flow.py step "My Flow" --action 'tell application "System Events" to key code 48' --expected 'Tab lands on the target'
python3 ~/.config/opencode/skills/create-flow/scripts/sin-flowd.py --port 8787 --root .look_at for sin-flow output; the step already captures and analyzes the screenshot.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.