AgiFlow icon

AgiFlow

agiflow/agiflow · v0.3.1 · Development & Workflow

by AgiFlowScan grade: GoodAwesome AI Plugins

Project management workflows for AI coding agents with planning, grooming, task execution, review, and AgiFlow MCP integration.

InstallSourceClaim this plugin
Follow0
Trust Score71Security scan85Components11
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is AgiFlow a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • MCP
  • Codex
  • Claude Code
  • Antigravity CLI
  • Cursor
  • Agent Plugin
  • 10 skills
  • 1 MCP server

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Read, Write
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence
  • 2 medium findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is AgiFlow?

AgiFlow is a published development & workflow plugin for AI coding agents that works with MCP, Codex, Claude Code, Antigravity CLI, Cursor and Agent Plugin, developed by AgiFlow and distributed through the HOL AI plugin registry. Project management workflows for AI coding agents with planning, grooming, task execution, review, and AgiFlow MCP integration.

Canonical slug
agiflow/agiflow
Version
v0.3.1 · updated Nov 2, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
10 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

71

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
76/100
Maintenance
40/100
MCP server setup
100/100
Plugin Security
85/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/AgiFlow/ai-plugin
Source commit
a868046199a4…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
85
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-7CGzri / cisco-skill-scanner: failedcodex:hol-plugin-scanner-7CGzri / cisco-mcp-scanner: unavailable

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

21/24

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

24/31

9 checks

[codex:.] Security

21/24

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

5/15

3 checks

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

[gemini:.] Gemini Extension

10/10

3 checks

[gemini:.] Security

21/24

6 checks

[gemini:.] Operational Security

N/A

5 checks · not applicable

[gemini:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediummarketplaceMARKETPLACE_SOURCE_INVALID

plugin[0] in marketplace.json must declare "source": {"source": "local", "path": "./plugins/..."}

Use the official repo marketplace shape with a local source object.

mediummarketplaceMARKETPLACE_UNSAFE_SOURCE

The marketplace source "plugin[0]=missing "source.path"" is absolute or resolves outside the plugin directory.

Use relative in-repo paths that stay within the plugin directory.

lowsecuritySECURITY_MD_MISSINGReported 3 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the agiflow entry from the agiflow marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall agiflow@agiflow.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "agiflow",
  "version": "0.3.1",
  "description": "AgiFlow AI plugin",
  "repository": "https://github.com/AgiFlow/ai-plugin",
  "author": {
    "name": "AgiFlow"
  },
  "license": "MIT",
  "keywords": [
    "ai-plugin",
    "codex",
    "claude-code",
    "cursor",
    "gemini",
    "mcp"
  ],
  "skills": "./",
  "interface": {
    "displayName": "AgiFlow",
    "developerName": "AgiFlow",
    "shortDescription": "Use AgiFlow tools in Codex",
    "longDescription": "Access AgiFlow tools, skills, and MCP-backed workflows directly from Codex.",
    "category": "Productivity",
    "capabilities": [
      "Read",
      "Write"
    ],
    "defaultPrompt": [
      "Show me the key Agiflow workflows",
      "Find open Agiflow issues",
      "Help me use the Agiflow plugin"
    ],
    "brandColor": "#F9BD2B",
    "composerIcon": "./assets/icon.png",
    "logo": "./assets/logo.svg"
  },
  "mcpServers": "./.registry/mcp.json",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/AgiFlow/ai-plugin
Marketplace path
.claude-plugin/marketplace.json
Source path
plugins/AgiFlow/ai-plugin
Install policy
AVAILABLE

Skills

10 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • backlog-grooming

    skills/backlog-grooming/SKILL.md

    Review Agiflow Planning tasks for readiness, prioritize approved work, group related tasks into work units, and promote ready tasks to Todo. Use when grooming a backlog, organizing planned tasks, creating work units, or deciding what should be executed next.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • daily-standup

    skills/daily-standup/SKILL.md

    Produce a concise read-only Agiflow status summary covering completed work, work in progress, blockers, and recommended next priorities. Use for daily standups, morning checks, stakeholder updates, or a quick project pulse.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • getting-started

    skills/getting-started/SKILL.md

    Assess an authenticated Agiflow workspace and recommend the right next project-management workflow. Use when a user is new to Agiflow, asks what to do next, needs orientation, or is unsure whether to plan, refine, groom, triage, or review daily status.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • orchestrate

    skills/orchestrate/SKILL.md

    Pipeline orchestration: dispatch the highest-priority ready tasks/work units to agents, manage capacity, and coordinate the Todo to Done flow. Invoked as /agiflow:orchestrate. Uses list_tasks, list_active_tasks_by_org, list_members, update_task, get_work_unit_progress.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • project-plan

    skills/project-plan/SKILL.md

    Turn a product goal or feature request into a clear Agiflow project plan with small, testable tasks in Planning status. Use when starting a project, decomposing a feature, clarifying requirements, or converting an idea into an actionable backlog.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • refine-task

    skills/refine-task/SKILL.md

    Refine an existing Agiflow task into an unambiguous, testable specification without expanding its intended outcome. Use when a task is vague, lacks acceptance criteria, has unclear scope or dependencies, or is not ready for backlog grooming.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • review-work

    skills/review-work/SKILL.md

    Quality gate: verify each acceptance criterion of a completed task/work unit, run quality checks, and create follow-up tasks for gaps. Use before merging or to audit delivered work. Invoked as /agiflow:review-work <work-unit-or-task>. Uses get_work_unit, get_task, update_task, create_task, create_task_comment.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • run-task

    skills/run-task/SKILL.md

    Execute a single Todo task through In Progress to Review, meeting every acceptance criterion with tests and vibe-lint checks. Refuses Planning-status tasks. Invoked as /agiflow:run-task <task>. Uses get_task, update_task, create_task_comment.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • run-work

    skills/run-work/SKILL.md

    Execute a work unit end-to-end: sequence tasks by dependency, implement, test between tasks, commit, and track progress. Use to deliver a complete feature in one session. Invoked as /agiflow:run-work <work-unit>. Uses get_work_unit, list_tasks, update_task, get_work_unit_progress.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • triage

    skills/triage/SKILL.md

    Diagnose stalled, blocked, overloaded, or unhealthy Agiflow projects and recommend specific corrective actions. Use for project health checks, blocked work, conflicting priorities, obsolete tasks, overloaded assignees, or an unmanageable backlog.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.agents/plugins/marketplace.json

file

388 bytes

27900d2193a6e3e1…

.claude-plugin/marketplace.json

file

348 bytes

7137362f0ebe29f7…

.claude-plugin/plugin.json

file

376 bytes

54a0abc14a2f9ef2…

.codex-plugin/plugin.json

plugin-manifest

810 bytes

b2fd5fa3f89752f7…

.cursor-plugin/plugin.json

file

335 bytes

18cfd9e756025e8e…

.mcp.json

file

191 bytes

9856012392bf128a…

.registry/mcp.json

mcp-config

130 bytes

3985357b244b6cdf…

assets/icon.png

asset

58,380 bytes

e1f932b79d0feba0…

assets/logo.svg

asset

28,872 bytes

832c3e9e51c881d7…

gemini-extension.json

file

572 bytes

856548b8e489b109…

GEMINI.md

file

108 bytes

d790744e5a43f65a…

LICENSE

file

1,420 bytes

b7cf42eab3b20f4a…

plugin.json

file

24 bytes

c7276d9aa2fec279…

README.md

file

7,875 bytes

27db2f264df0a9a8…

skills/backlog-grooming/SKILL.md

skill

2,139 bytes

911830f4ec486154…

skills/daily-standup/SKILL.md

skill

1,701 bytes

8ee379dd99603095…

skills/getting-started/SKILL.md

skill

1,806 bytes

6965f91c31ad22b8…

skills/orchestrate/SKILL.md

skill

4,165 bytes

2cc32b064197a8aa…

skills/project-plan/SKILL.md

skill

2,042 bytes

7ecfd753e7751993…

skills/refine-task/SKILL.md

skill

1,939 bytes

5656f367407a0c28…

skills/review-work/SKILL.md

skill

6,390 bytes

88f3a4a71bd6f4ab…

skills/run-task/SKILL.md

skill

9,092 bytes

8307409e41d298bf…

skills/run-work/SKILL.md

skill

10,493 bytes

9a3635049a32261b…

skills/triage/SKILL.md

skill

1,910 bytes

f770de0be9c6d65b…

AgiFlow — Frequently asked questions

What is AgiFlow?
AgiFlow is an AI plugin in the HOL registry. Project management workflows for AI coding agents with planning, grooming, task execution, review, and AgiFlow MCP integration.
How do I install AgiFlow?
Install AgiFlow in your harness: Codex — codex plugin marketplace add AgiFlow/ai-plugin; Claude Code — /plugin marketplace add AgiFlow/ai-plugin; Cursor — npx [email protected] add AgiFlow/ai-plugin. Full step-by-step guidance is on the HOL plugin page.
How do I install AgiFlow in HOL Guard?
To install AgiFlow in HOL Guard, start with hol-guard plugin install agiflow/agiflow --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install AgiFlow in Codex?
To install AgiFlow in Codex, start with codex plugin marketplace add AgiFlow/ai-plugin. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install AgiFlow in Claude Code?
To install AgiFlow in Claude Code, start with /plugin marketplace add AgiFlow/ai-plugin. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for AgiFlow computed?
AgiFlow has a HOL Trust Score of 71 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/agiflow%2Fagiflow/trust
Who publishes AgiFlow?
AgiFlow is published by AgiFlow and listed on HOL.

Directory acceptance

Listed in 1 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from AgiFlow.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins