Skip to content
Back to skills

M Flow

ASecurity

"Operate M-flow memory, graph-routed retrieval, ingestion

  • 247 stars
  • 0 votes
  • 0 copies
  • 4 views
  • Added September 8, 2026
ai-agentspythonbashsqlfastapirailsdockerapibackend

Works with

  • cli
  • api
  • mcp

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned September 8, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill m-flow --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of M Flow?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for M Flow
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-m-flow/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-m-flow)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: m-flow
description: "Operate M-flow memory, graph-routed retrieval, ingestion
  pipelines, service integrations, MCP, and storage backends for the mflow-ai
  package."
disable-model-invocation: true
metadata:
  disco-role: operating
license: Apache 2.0
---

# M-flow

Use this repo skill when a task involves M-flow / `mflow-ai`: persistent memory
for agents, graph-routed RAG, episodic/procedural memory, the `m_flow` Python
package, the `mflow` CLI, the FastAPI service, web UI, MCP server, or storage
backend configuration.

## Fast orientation

M-flow stores knowledge as layered memory, then retrieves by graph-routed
Bundle Search. The common in-process workflow is:

1. `await m_flow.add(...)` or `await m_flow.ingest(...)` to register data.
2. `await m_flow.memorize(...)` to build Episode / Facet / FacetPoint / Entity
   graph memory.
3. `await m_flow.query(...)` or `await m_flow.search(...)` to retrieve context
   or an LLM-written answer.

Install the public package with `pip install mflow-ai`, or install a checkout
with `pip install -e .`. Python 3.10-3.13 is supported by project metadata; use
Python 3.11 when choosing a conservative inspection/development runtime.

Minimal checks:

```bash
python -c "import m_flow; print(m_flow.__version__)"
mflow --help
python scripts/check_mflow_env.py
```

## Route by task

| If the user asks about... | Read |
| --- | --- |
| Python APIs, CLI commands, add/memorize/query/ingest, datasets, manual graph insertion, delete/update/prune, config facade | [sub-skills/core-memory-api/SKILL.md](sub-skills/core-memory-api/SKILL.md) |
| Input formats, loader selection, `preferred_loaders`, chunking, `content_type`, content routing, procedural learning, custom pipelines | [sub-skills/ingestion-pipelines/SKILL.md](sub-skills/ingestion-pipelines/SKILL.md) |
| Recall modes, `SearchConfig`, episodic Bundle Search, graph/vector/relational/cache backend tuning, empty/noisy results, Cypher | [sub-skills/retrieval-graph-search/SKILL.md](sub-skills/retrieval-graph-search/SKILL.md) |
| FastAPI, web UI, Docker Compose, auth, settings, MCP, cloud sync, workers, face-aware playground, service status | [sub-skills/service-integrations/SKILL.md](sub-skills/service-integrations/SKILL.md) |
| Cross-cutting environment variables, optional extras, credential/service prerequisites | [references/configuration.md](references/configuration.md) |
| Install/import, credentials, DB locks, optional dependency, logging, or safe-operation recovery | [references/troubleshooting.md](references/troubleshooting.md) |
| Staleness and source snapshot checks | [references/repo-provenance.md](references/repo-provenance.md) |

## Operating guardrails

- M-flow API calls are mostly asynchronous; wrap examples in `asyncio.run()` or
  use an existing event loop.
- `TRIPLET_COMPLETION` and graph construction need LLM/embedding credentials;
  `EPISODIC`, `PROCEDURAL`, `CHUNKS_LEXICAL`, and `CYPHER` retrieve from data
  that must already be memorized.
- Defaults are local file-backed storage: SQLite relational metadata, LanceDB
  vectors, and Kuzu graph storage. External services need matching extras,
  environment variables, and service health checks.
- Do not run destructive operations (`delete`, `prune`, hard deletion, DB
  migrations, service stop/kill) without explicit user scope and confirmation.
- Treat optional browser scraping, face recognition, cloud sync, MCP remote API
  mode, Modal workers, and external DB providers as optional surfaces; verify
  credentials/services before claiming they work.
- Keep generated helper scripts safe by default. Use live workflow flags only
  when the user accepts local storage writes and credential use.

Files in this skill

  • SKILL.md3.6 KB
  • references/configuration.md5 KB
  • references/repo-provenance.md2.5 KB
  • references/repo-routing-metadata.json492 B
  • references/troubleshooting.md5.1 KB
  • scripts/check_mflow_env.py6 KB
  • sub-skills/core-memory-api/SKILL.md3 KB
  • sub-skills/core-memory-api/references/api-reference.md9.6 KB
  • sub-skills/core-memory-api/references/cli-reference.md5.8 KB
  • sub-skills/core-memory-api/references/troubleshooting.md7.8 KB
  • sub-skills/core-memory-api/references/workflows.md7.3 KB
  • sub-skills/core-memory-api/scripts/core_workflow_smoke.py6.9 KB
  • sub-skills/ingestion-pipelines/SKILL.md4.5 KB
  • sub-skills/ingestion-pipelines/references/data-formats.md7.1 KB
  • sub-skills/ingestion-pipelines/references/pipeline-reference.md11.6 KB
  • sub-skills/ingestion-pipelines/references/troubleshooting.md8.2 KB
  • sub-skills/ingestion-pipelines/scripts/pipeline_stage_inspector.py7.1 KB
  • sub-skills/retrieval-graph-search/SKILL.md3.9 KB
  • sub-skills/retrieval-graph-search/references/api-reference.md9.7 KB
  • sub-skills/retrieval-graph-search/references/retrieval-architecture.md7.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.