Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add vre/flow-statenpx agentmods add plugins/vre/flow-state/marketplacegit clone --depth 1 https://github.com/vre/flow-stateGrade A, and why
flow-state scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 50 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "flow-state",
"owner": {
"name": "Ville Reijonen",
"email": "[email protected]"
},
"metadata": {
"description": "Knowledge work, context management, and productivity tools/skills/etc. for Claude Code",
"version": "20260531.1000",
"pluginRoot": "./"
},
"plugins": [
{
"name": "youtube-to-markdown",
"source": "./youtube-to-markdown",
"description": "Transform YouTube video to storagable knowledge. Choose from summary only, transcript only, comments only, or full extraction. Get tight summary, cleaned transcript, curated comment insights, and watch guide with WATCH/SKIM/READ-ONLY gate. Browse channels to batch-extract or refresh comments. Modular architecture runs independent steps in parallel.",
"version": "3.0.0",
"category": "media-extraction",
"keywords": ["youtube", "transcript", "captions", "markdown", "summary", "chapters", "comments", "channel"],
"skills": ["./"]
},
{
"name": "imap-slim-mcp",
"source": "./imap-slim-mcp",
"description": "Lightweight IMAP email MCP server. ~500 tokens vs 15,000+. Multi-account support. Read, search, draft, flag emails with markdown support.",
"version": "1.0.0",
"category": "productivity",
"keywords": ["email", "imap", "mcp"]
},
{
"name": "chrome-control",
"source": "./chrome-control",
"description": "Control Chrome via CDP — debug web apps, run JavaScript, take screenshots, monitor console. Connects to your running Chrome session (M144+) or launches a separate instance.",
"version": "1.0.0",
"category": "browser-automation",
"keywords": ["chrome", "cdp", "devtools", "debugging", "screenshots", "browser"],
"skills": ["./"]
},
{
"name": "firefox-control",
"source": "./firefox-control",
"description": "TEST TOOL: Control Firefox via WebDriver BiDi. Direct WebSocket, no geckodriver. Daemon mode with persistent connection. naWhat this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 50 lines scan A 135e1b6d69c2
flow-state is a plugin published in the GitHub repository vre/flow-state (12 stars, last pushed 2mo ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
web-interact
Plugin marketplace listing 1 plugin: web-interact.
web-interact
Browser automation CLI for AI agents — navigate, discover, click, fill, screenshot, extract.
skill-seekers
Transform 18 source types (docs, GitHub, PDFs, videos, Jupyter, Confluence, Notion, Slack, and more) into AI-ready skills and RAG knowledge for 21+ AI platforms.
browser-tools
Chrome automation tools for agent-assisted web testing and interaction using Chrome DevTools Protocol.
bankstatemently
Convert your bank statements into structured, queryable financial data — transactions, accounts, and balances from any PDF statement, then analyze them across every statement you've uploaded.
productivity
Manage tasks, plan your day, and build up memory of important context about your work. Syncs with your calendar, email, and chat to keep everything organized and on track.