cognitedata/builder-skills298 installs

flows-app-review

Q: How do I install this agent skill?

Run npx skills add https://github.com/cognitedata/builder-skills --skill flows-app-review.

Q: Is this agent skill safe to install?

Review the displayed partner audits, complete source, permissions, dependencies, and exact revision before installing.

Run a full Flows app platform review against a React/TypeScript CDF codebase, following the cognitedata/dune-app-reviews scoring criteria. Produces three artifacts: review-files.md (per-file inventory), review-packages.md (dependency audit), and review-report.md (scored report with must/should/nice-fix items). Use when the user asks for a Flows app review, pre-submit review, approval review, app certification review, code quality audit, CDF platform review, or "run dune-review" on a codebase before submission.

How do I install this agent skill?

npx skills add https://github.com/cognitedata/builder-skills --skill flows-app-review

view source ↗

Is this agent skill safe to install?

Gen Agent Trust Hubpass
The skill fetches and follows instructions from the author's official GitHub repository at runtime. While this uses the vendor's own infrastructure, it creates a mechanism for remote instruction execution. Additionally, the skill's review process is susceptible to indirect prompt injection from the local codebase being analyzed.
Socketwarn
1 alert: gptAnomaly
Snykwarn
Risk: MEDIUM · 2 issues

What does this agent skill do?

Flows App Review

Fetch the official review command and follow it exactly:

gh api repos/cognitedata/dune-app-reviews/contents/.claude/commands/dune-review.md \
  --jq '.content' | base64 -d

Adapt it for a local developer review:

Treat the current workspace as the app under review.
Skip all ticket, PR, overview, submodule, and reviews/<TICKET-ID>/... setup steps.
If the upstream command asks for Jira ticket or PR input, ignore that requirement and continue with the local codebase.
Use reviews/flows-app-review/feedback-round-<N>/ as the artifact directory for local reviews.
If no local feedback round exists yet, use reviews/flows-app-review/feedback-round-1/. For reruns, increment the round number.

After the review artifacts are written, fetch the official verification command and follow it too:

gh api repos/cognitedata/dune-app-reviews/contents/.claude/commands/dune-review-verify.md \
  --jq '.content' | base64 -d

Adapt verification the same way:

Skip ticket and feedback-round lookup.
Read the three artifacts from reviews/flows-app-review/feedback-round-<N>/ instead of reviews/<TICKET-ID>/feedback-round-N/.
Verify the review against the local source code before declaring it complete.

How can the creator link this skill?

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/cognitedata/builder-skills/flows-app-review">View flows-app-review on skillZs</a>