Proflow

AdvisoryAudited by Static analysis on May 8, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent may change project files without a separate manual approval step for each edit.

Why it was flagged

The skill clearly discloses that it may automatically execute the workflow and modify code, including skipping planning for small fixes.

Skill content
`proflow full` — 一键全自动完整流程(脑暴→计划→执行→文档) ... 若判定为 `fix` 或 `小功能`,**跳过后续所有阶段流程**,直接定位代码并进行修改
Recommendation

Use version control, review diffs after execution, and prefer single-stage commands over `proflow full` when you want tighter control.

What this means

Actual behavior during planning, execution, and spec generation depends partly on those separate skills.

Why it was flagged

The skill relies on other installed skills whose artifacts and versions are not part of the provided review set.

Skill content
使用本技能前必须确保已安装:1. `openspec` 技能 2. `superpowers` 技能 ... 调用 `superpowers executing-plans` skill 或 `superpowers subagent-driven-development` skill
Recommendation

Review and install trusted versions of `openspec` and `superpowers` before using Proflow.

What this means

Stale or manually changed status files could cause later runs to skip phases, and logs/status files may retain project workflow details.

Why it was flagged

The skill stores persistent stage-completion markers locally and reuses them to decide whether phases are already complete.

Skill content
STATUS_DIR = Path('.opencode/status/proflow') ... def get_status_file(stage):
    return STATUS_DIR / f"{stage}.done"
Recommendation

Inspect `.opencode/status/proflow/` and `docs/logs/` if behavior seems unexpected, and use the documented reset command rather than relying on stale state.