Plugin
devflow
Structured AI development workflows for Claude Code. Enforces planning, approval, task tracking, and code review gates through MCP — so AI agents work within a defined process instead of writing code without oversight.
- Analysed
- Last observed
What the code does
- Runs shell commands Code that starts system commands on the machine it runs on.
- Sends data to outside servers Code that posts data to network addresses.
- Evaluates code at runtime Code that builds and runs code while it executes.
- Asks your agent's AI to write text The server can request text from the agent's own model (MCP sampling).
Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.
This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.
Risk
Sign in to see this tool's overall risk level and what drives it. Free.
Coverage
Complete static analysis
Detailed report
5 findings from automated static analysis of the latest version, with severities and explanations.
Using this tool across your team? We can assess your whole inventory.
Request an inventory assessment