Skip to content
Back to skills

Flow Health

ASecurity

Diagnose repository and PWDEV Flow health without changing the project. Use when the user asks for a health check, workspace consistency check, dependency assessment, readiness report, or evidence-based scorecard.

  • 3 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 9, 2026
securitygogitdatabasesecuritydocumentation

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 9, 2026

npx -y skills add pwdev-solucoes/pwdev-claude-marketplace --skill flow-health --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Flow Health?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Flow Health
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/pwdev-solucoes-flow-health/badge)](https://www.skillsdirectory.com/skills/pwdev-solucoes-flow-health)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: flow-health
description: Diagnose repository and PWDEV Flow health without changing the project. Use when the user asks for a health check, workspace consistency check, dependency assessment, readiness report, or evidence-based scorecard.
---

# Diagnose PWDEV Flow Health

Read [health](../../references/health.md), [artifacts](../../references/artifacts.md), [audit](../../references/audit.md), and [safety](../../references/safety.md) before collecting evidence.

## Route

Choose exactly one mode from the request:

- `full` for repository, Flow workspace, local quality checks, documentation, Git, dependencies, and locally available security checks;
- `workspace` for Flow structure, state, gates, links, memory, audit, and migration consistency;
- `deps` for manifests, lockfiles, locally available dependency checks, and freshness evidence.

Default to `full` only when the user asks for a general health check. State the selected mode before running commands.

## Procedure

1. Read applicable `AGENTS.md`, then inspect Flow config, state, manifests, and relevant artifacts without opening secret files.
2. Discover verification commands from repository governance and manifests. Do not invent package-manager commands.
3. Run only read-only or non-mutating checks already available locally. Keep network-backed checks separate and request authorization before using them.
4. For `workspace`, validate links, phase/state agreement, gate evidence, memory index targets, migration records, and audit integrity with [flow_audit.py](../../scripts/flow_audit.py) when a trail exists.
5. Classify findings by severity and grade each applicable area `A` through `F` using the health contract. Use `N/A` for unavailable evidence, never as a passing grade.
6. Recommend bounded next actions but do not implement them.

## Constraints

- Remain read-only: do not install packages, update lockfiles, repair audit data, edit state, or apply findings.
- Do not treat a missing optional tool, unavailable network, or stale external database as a product failure; report the limitation and confidence.
- Persist a report only when the user requests it or an active Flow contract already authorizes it.

## Output

Return `MODE`, urgent findings first, a scorecard with evidence and confidence, limitations, `OVERALL`, and `NEXT`. Link persisted reports with absolute local paths.

Files in this skill

  • SKILL.md2.3 KB
  • agents/openai.yaml202 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…