TheChengXi/intent-flow
C2IntentFlow — Comment-Driven Development Framework 注释驱动开发框架：以 @intent 注释为契约的 AI 辅助开发工作流（需求/设计/执行/报告四阶段 + 状态机自动流转），提供 pi 扩展、MCP Server、CLI 三种形态
★ 1+ · TheChengXi/intent-flow source on GitHub · this plugin in the registry
TheChengXi/intent-flow is a DeepSeek Harness plugin rated C2 — one powerful capability or sensitive behavior. It runs code at install time, executes system commands, uses eval / new Function, starts a network server.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| runs code at install time | install_script | postinstall: node scripts/copy-wasm.js |
| executes system commands | exec | ×6 src, e.g. .archive/retired_pi.008/adapter/pi/runtime/RpcProcessPool.ts:24, .archive/retired_pi.008/adapter/pi/runtime/RpcProcessPool.ts:304 |
| uses eval / new Function | eval | ×2 src, e.g. .archive/retired_pi.008/pi/extensions/intent-flow/extension.js:4604, .archive/retired_pi.008/pi/extensions/intent-flow/extension.js:4627 |
| starts a network server | net_server | ×3 src, e.g. src/adapter/mcp/MCPServer.ts:72, src/adapter/mcp/MCPServer.ts:76 |
Outbound domains
tree-sitter.github.io
Environment variables it reads
IFLOW_CHILD IFLOW_BUILD
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.