No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by UfoMiao · Claude Skill · ★ 6.1k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is zcf safe to install? View the security audit →
[![npm version][npm-version-src]][npm-version-href] [![npm downloads][npm-downloads-src]][npm-downloads-href] [![License][license-src]][license-href] [![Claude Code][claude-code-src]][claude-code-href] [![codecov][codecov-src]][codecov-href] [![JSDocs][jsdocs-src]][jsdocs-href] [![Ask DeepWiki][deepwiki-src]][deepwiki-href] ZCF - Zero-Config Code Flow English Changelog ✨ Full Documentation: ZCF Docs Zero-config, one-click setup for Claude Code & Codex with bilingual support, intelligent agent system and personalized AI assistant ♥️ Sponsors This project is sponsored by Z.ai, supporting us with their GLM CODING PLAN. GLM CODING PLAN is a subscription service designed for AI coding, starting at just $10/month. It provides access to their flagship GLM-4.7 & （GLM-5 Only Available for Pro Users）model across 10+ popular AI coding tools (Claude Code, Cline, Roo Code, etc.), offering developers top-tier, fast, and stable coding experiences. Get 10% OFF GLM CODING PLAN：https://z.ai/subscribe?ic=8JVLJQFSKB 302.AI is a pay-as-yo
| Stars | 6,078 |
| Forks | 420 |
| Language | TypeScript |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 59.621440784861/100 |
| Open Issues | 43 |
| Last Updated | 2026-08-31 |
| Created | 2025-07-30 |
| Platforms | claude-code, cli, codex, node |
| Est. Tokens | ~16k |
These tools work well together with zcf for enhanced workflows:
Looking for a zcf alternative? If you're comparing zcf with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
📦 Repomix is a powerful tool that packs your entire repository into a single, AI-friendly file. Perfect for w
程序员鱼皮的 AI 资源大全 + Vibe Coding 零基础教程，分享 OpenClaw 保姆级教程、大模型玩法（DeepSeek / GPT / Gemini / Claude / GLM）、最新 AI 资讯、Pr
多模型协作工作流引擎 — /ccg:go 一个命令，AI 自动分析意图、选择策略、编排 Codex + Gemini + Claude 协作执行
Cascading runtime for AI agents. Optimize cost, latency, quality, and policy decisions inside the agent loop.
Conquer Any Code in VSCode: One-Click Comments, Conversions, UI-to-Code, and AI Batch Processing of Files! 在 V
A powerful GUI app and Toolkit for Claude Code - Create custom agents, manage interactive Claude Code sessions
Explore other popular claude skill tools:
zcf is Zero-Config Code Flow for Claude code & Codex. It is categorized as a Claude Skill with 6.1k GitHub stars.
zcf is primarily written in TypeScript. It covers topics such as agent, ai, ai-agent.
You can find installation instructions and usage details in the zcf GitHub repository at github.com/UfoMiao/zcf. The project has 6.1k stars and 420 forks, indicating an active community.
zcf is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to zcf on Agent Skills Hub include repomix, ai-guide, ccg-workflow. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: