Agent skill

Q Flow

by supermax92 in supermax92/qgraphflow

Create, audit or refresh evidence-grounded interactive software diagrams from source, schemas, config, or requirements; deliver offline HTML, graph JSON and SVG.

MITAuto-check passedDevelopment

Install Q Flow

skills CLI
$ npx skills add supermax92/qgraphflow --skill q-flow -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install supermax92/qgraphflow q-flow --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/supermax92/qgraphflow.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/q-flow .claude/skills/q-flow && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
q-flow
GitHub stars
111
Token cost
~2.6k tokens
SKILL.md length
1,220 words
Files
114 (incl. scripts, references, assets)
Skills in repo
1
Repo updated
First seen
Licence
MIT

At a glance

Create, audit or refresh evidence-grounded interactive software diagrams from source, schemas, config, or requirements; deliver offline HTML, graph JSON and SVG.

  • Works in 5 steps: Choose meta.diagramType by intent:… → Each view uses graph-common.md and its… → Write the evidenced graph at the chosen… → …
  • Tasks that involve Diagrams
  • SKILL.md covers Intake, Evidence, Author and Generate and verify, plus 3 more sections
  • Runs JavaScript scripts from its folder; calls node

What it does

Q Flow is an agent skill from supermax92/qgraphflow. Create, audit or refresh evidence-grounded interactive software diagrams from source, schemas, config, or requirements; deliver offline HTML, graph JSON and SVG.

Its SKILL.md is about 2.6k tokens, which your agent loads only when the skill is triggered. The skill folder holds 119 other files, including scripts, reference files and assets (for example `agents/openai.yaml`, `assets/layout-dist/ELK-LICENSE.md` and `assets/viewer/layout-worker.js`).

It sits in Development, covering Diagrams. The repository describes itself as: Generate evidence-grounded interactive software diagrams with offline HTML, SVG and PNG export. The licence is MIT.

When your agent uses it

  • Tasks that involve Diagrams

Example prompts

  • “/q-flow”

Requirements

  • Node.js

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Choose meta.diagramType by intent: structure → architecture; decisions → flowchart; ordered calls → sequence; stored data → er; runtime…
  2. Each view uses graph-common.md and its matching page in references/types/ (types/.md); reuse loaded references across views. Do not read…
  3. Write the evidenced graph at the chosen granularity, without coordinates. Record level/coverage in meta.scope and check every user…
  4. Templates measure text and preserve order; routes use feasible outlines and independent labels. Never remove facts.
  5. Default output: /docs/qgraphflow/-/. Document-only work uses the current project root instead; without a suitable project or specified…

What it can do on your machine

Read from SKILL.md and the folder at commit 0ab127e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (JavaScript, from the files we listed), which the agent can run.

    Shell commands in SKILL.md call:

    • node

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Q Flow loads about 2.6k tokens when it runs, and up to ~43k if it reads all its reference files. Until then it costs about 42 tokens; SKILL.md has 1,220 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~42
When it runs · the whole SKILL.md, loaded when a task matches
~2.6k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~43k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from supermax92/qgraphflow at commit 0ab127e, republished under its MIT licence (© supermax92). 1,220 words, ~2,552 tokens.

Download SKILL.mdSave it as .claude/skills/q-flow/SKILL.md (or your agent's skills folder). This skill also uses 113 other files; get the full folder from GitHub.
name
q-flow
description
Create, audit or refresh evidence-grounded interactive software diagrams from source, schemas, config, or requirements; deliver offline HTML, graph JSON and SVG.
argument-hint
[module or flow] [what the diagram should answer]

Q flow

Offline HTML diagrams with SVG/PNG downloads.

Intake

Resolve intent first: an audit is read-only, even if source drift is found. Read and validate without --fix; report findings without generation, edits or --force. Only an explicit update enters Refresh. Read all supplied material, combining source and documents when requested; distinguish implemented facts from documented intent. Existing graphs supply scope, type, granularity, views and directory; inherit these unless changed.

A request is ready when every requested view has a subject and question. Structure accepts a system, module or entity set; behaviour needs a flow or component, including one described in a document. For missing scope or output location, use guided-intake.md. Ask only for missing information, usually in one or two rounds; continue if essential scope remains unclear. Use a structured question tool when available, otherwise numbered options. After asking, end the turn and wait for the reply; never assume an answer. Write no output files before the round completes.

For every ready request, apply Granularity before Evidence, even when intake is skipped. Default unspecified preferences; then start without another confirmation.

Evidence

  • For repository evidence, follow evidence-sources.md: verify tool/index availability before reporting CodeGraph, otherwise trace directly. Documents use document evidence.
  • Use source/tests for calls, DDL/mappings for ER, manifests for deployment, and accepted requirements plus implementation for business behavior.
  • Preserve exact identifiers and file/line anchors. Separate repository facts, framework behavior, documents, and inference; omit unproven critical relationships and label other inference. Never put secrets or token values in graph data.
  • Public examples and documentation must use independently authored fictional content or public sources. Never reuse private project names, paths, architecture, rules, versions, status or reference images; renaming them is insufficient. Remove affected generated copies when replacing private-derived examples. This does not restrict private diagrams explicitly requested for the user's own project.

Author

Eleven templates: three architecture views (meta.architectureView: capabilities, engineering, relations) and eight other types below.

  1. Choose meta.diagramType by intent: structure → architecture; decisions → flowchart; ordered calls → sequence; stored data → er; runtime placement → deployment; types → class; lifecycle → state; actors/capabilities → usecase; data movement → dataflow. Default to architecture when ambiguous. Architecture: platform capabilities / business integration → capabilities; engineering organization / component layers → engineering; component calls / dependencies → relations. Use one graph unless the user explicitly requests multiple views.
  2. Each view uses graph-common.md and its matching page in references/types/ (types/<diagramType>.md); reuse loaded references across views. Do not read graph-schema.md, visual-contract.md, examples/, scripts/, assets/ or tests to learn rules. Use the type skeleton and validator messages for fields.
  3. Write the evidenced graph at the chosen granularity, without coordinates. Record level/coverage in meta.scope and check every user requirement before layout. Apply the common rules for names, evidence, ownership, order and business centre. Across views reuse the same non-empty module value for the same business module. Preserve ER keys/cardinalities, class members/multiplicities, sequence pairing/fragments/executions, state guards and architecture/deployment boundaries required at this level. Write once; correct only reported fields.
  4. Templates measure text and preserve order; routes use feasible outlines and independent labels. Never remove facts.
  5. Default output: <repository-root>/docs/qgraphflow/<scope>-<diagram-type>/. Document-only work uses the current project root instead; without a suitable project or specified directory, ask only for the output location. Honor user-selected directories.

Generate and verify

Resolve the skill directory from the loaded SKILL.md, not the client's working directory or a hard-coded installation path. Quote absolute paths in the target repository; never output into plugin caches.

Run from the skill directory:

bash
node scripts/validate-graph.mjs "<absolute-graph.json>" --input-only --repo-root "<absolute-repository-root>"
node scripts/generate-viewer.mjs "<absolute-graph.json>" "<absolute-output-directory>" --repo-root "<absolute-repository-root>"
node scripts/validate-graph.mjs "<absolute-output-directory>/graph.json" --repo-root "<absolute-repository-root>"
  • Execute the scripts; do not read them, the bundled HTML, the Viewer source or tests. --help lists every option. Failures report elements, rule, measurement and remediation; --verbose prints the receipt.
  • On failure, run node scripts/validate-graph.mjs "<graph.json>" --input-only --fix --repo-root "<root>" first: it repairs sequence order, operand ids, unambiguous replies/callee bars and unique source/site symbols, prints changes and writes only a valid graph. Then edit only reported fields/elements and rerun. Rewrite the whole file only for a wrong type or view split. Never delete supported facts, shrink text or use --force to pass a check.
  • Composition warnings never fail the run; input validation prints them, later commands count them (warnings: n). Fix module.missing, module.inconsistent, flowchart.process-branch (a non-decision branches) and edge.site-missing. For module.single-tone, keep one module if the flow really belongs to it; never rename a module for colour. view.oversized means over 4 screens at readable zoom: apply the common contract's view-splitting rules while preserving requested detail and graph count. A failing collection names every failing view.
  • If bounded layout still fails, distinguish a search budget from proven impossibility, report the blocking nodes and relationships and propose separate views with explicit coverage of the original model; never silently reduce the requested detail. Generation defaults to --layout auto; --layout preserve keeps existing geometry under the same gate.
  • For repository-backed diagrams, pass the target repository root to both commands: they verify every node source and edge site against local UTF-8 files (existence, line range, symbol, no path escape) and report sourceEvidence with its relations coverage. This checks the working tree, not the commit in sourceRef or whether code proves a relationship. Omitting --repo-root reports skipped, never verified evidence; say so when source files are unavailable. Conceptual diagrams need no root.
  • Outputs are index.html, graph.json and one SVG per view (diagram.svg, or diagram-<n>-<type>.svg in a collection), built from the prebuilt viewer; no rebuild or install. Use --force only with approval to replace the named outputs. All collection views must pass before replacing output.
  • Reply with artifact paths, types, granularity and coverage (meta.scope), semantic/geometry/source-relation results, meta.notes, unresolved evidence boundaries, and Browser acceptance: not performed unless the next section ran. Never paste full HTML or graph JSON.
Show full SKILL.md (298 more words)Show less

Acceptance on request

Ordinary graph delivery ends with the three commands above. Run the browser checks in acceptance.md only when (a) the user asks to see or check the rendering, (b) the delivery includes Viewer changes, or (c) a receipt reports rendering diagnostics; read that file only then. Otherwise the reply carries Browser acceptance: not performed.

Refresh an existing diagram

Read the supplied graph and collection metadata. Inherit type, scope, granularity, view count and directory. An explicit update approves --force for that directory; audit findings alone do not. Resolve only the requested views; ask if their identity is ambiguous.

Simplification uses verified facts in Author. Expansion returns to Evidence before Author. Preserve stable IDs; report gaps, aggregations, additions and exclusions. These changes authorize --layout auto --force for the requested views only. In a collection add --view <view-id> for each changed view; omit it only when all views need layout. Unselected views must pass preserve; never relayout them to clear a failure. Ordinary refresh preserves geometry:

bash
node scripts/validate-graph.mjs "<dir>/graph.json" --input-only --fix --repo-root "<root>"
node scripts/generate-viewer.mjs "<dir>/graph.json" "<dir>" --layout preserve --force --repo-root "<root>"

Between the two, fix only anchors still reported: read just their files, edit just those source / site anchors or facts, and report a symbol you cannot place. Then validate the output as above. preserve keeps the user's moved positions and edited text; if it fails the gate, report the nodes and ask before --layout auto. Reply with the changed anchors and every artifact path. If a browser could only download graph.json, put it in <dir> and regenerate the page and SVGs.

Viewer maintenance

For Viewer changes or interaction audits, read viewer-development.md, including its maintained visual/interaction contract. Changes to Viewer source, routing, schema behavior, or validation require the full eleven-view browser matrix described there. Graph-only delivery uses the single-page check in acceptance.md.

Publishing the plugin or creating a remote repository requires separate user authorization.

© supermax92, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 113 other files (scripts, references, assets) in skills/q-flow of supermax92/qgraphflow.

  • SKILL.md
  • .npmignore
  • agents/openai.yaml
  • assets/layout-dist/ELK-LICENSE.md
  • assets/layout-dist/worker.mjs
  • assets/viewer-dist/index.html
  • assets/viewer/build-layout.mjs
  • assets/viewer/index.html
  • assets/viewer/layout-worker.js
  • assets/viewer/package-lock.json
  • assets/viewer/package.json
  • assets/viewer/src/DiagramCanvas.jsx
  • assets/viewer/src/NodeCard.jsx
  • assets/viewer/src/SelectionOutline.jsx
  • assets/viewer/src/TextEditor.jsx
  • … and 99 more

Open the folder on GitHubat commit 0ab127e

Compare with similar skills

Q Flow next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Q Flow compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Q Flow this skillsupermax92/qgraphflow111—~2.6kAutomated safety check: PassMIT
Archify Diagramstt-a1i/archify81k—~2.9kAutomated safety check: PassMIT
JSON Canvasheyitsnoah/claudesidian2.6k18 repos~3.5kAutomated safety check: PassMIT
Diagram Designcathrynlavery/diagram-design47k1 repos~7.5kAutomated safety check: PassMIT
Fireworks Tech Graphtisfeng/Easydict15k1 repos~1.4kAutomated safety check: PassMIT
Excalidraw Diagramcoleam00/excalidraw-diagram-skill5k2 repos~6.1kAutomated safety check: PassNone

Similar skills

  • Archify Diagrams

    tt-a1i/archify

    Creates interactive architecture, workflow, sequence, data-flow and lifecycle diagrams as standalone HTML with inline SVG, themes and image or video export.

    81k GitHub stars~2.9k tokensUpdated today
    DevelopmentAuto-check passed
  • JSON Canvas

    heyitsnoah/claudesidian

    Create and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections.

    2.6k GitHub starsUsed in 18 repos~3.5k tokens
    DevelopmentAuto-check passed
  • Diagram Design

    cathrynlavery/diagram-design

    Creates branded diagrams, from architecture, flowchart and sequence to charts and maps, as self-contained HTML with inline SVG, with import from draw.io, Mermaid and Excalidraw.

    47k GitHub starsUsed in 1 repo~7.5k tokens
    DevelopmentAuto-check passed
  • Fireworks Tech Graph

    tisfeng/Easydict

    Create precise SVG technical diagrams, export PNG or offline HTML, and animate supported semantic SVGs to GIF.

    15k GitHub starsUsed in 1 repo~1.4k tokens
    DevelopmentAuto-check passed
  • Excalidraw Diagram

    coleam00/excalidraw-diagram-skill

    Create Excalidraw diagram JSON files that make visual arguments.

    5k GitHub starsUsed in 2 repos~6.1k tokens
    DevelopmentAuto-check passed
  • Draw.io Diagram Studio

    Agents365-ai/drawio-skill

    Creates and edits editable draw.io diagrams from descriptions, code, infrastructure files, SQL and API schemas, with sync, review, test and export tools.

    10k GitHub stars~2.4k tokensUpdated 7 days ago
    DevelopmentAuto-check: notes

Categories

Questions about Q Flow

What does Q Flow do?

Create, audit or refresh evidence-grounded interactive software diagrams from source, schemas, config, or requirements; deliver offline HTML, graph JSON and SVG. Q Flow is an agent skill from supermax92/qgraphflow. Create, audit or refresh evidence-grounded interactive software diagrams from source, schemas, config, or requirements; deliver offline HTML, graph JSON and SVG.

When should I use Q Flow?

Q Flow fits situations like: tasks that involve Diagrams.

How do I install Q Flow in Claude Code?

Run `npx skills add supermax92/qgraphflow --skill q-flow -a claude-code`. Or copy the skill folder (skills/q-flow in supermax92/qgraphflow) into .claude/skills/q-flow in your project. Claude Code loads it when a task matches its description.

How do I install Q Flow in Codex?

Run `npx skills add supermax92/qgraphflow --skill q-flow -a codex`. Or copy the skill folder (skills/q-flow in supermax92/qgraphflow) into .agents/skills/q-flow in your project. Codex loads it when a task matches its description.

Can I use Q Flow in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add supermax92/qgraphflow --skill q-flow -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/q-flow, .gemini/skills/q-flow, .github/skills/q-flow and .opencode/skills/q-flow in your project.

What does Q Flow need to run?

Going by SKILL.md and its folder, Q Flow needs JavaScript for the scripts in its folder and the command-line tools its instructions call (node). Our summary lists: Node.js.

Does Q Flow access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Q Flow safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Q Flow use?

Q Flow is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Q Flow use?

About 2.6k tokens (SKILL.md is roughly 10k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 40k tokens, read only when the agent opens those files.

What are the alternatives to Q Flow?

Skills that share tags, products or a category with Q Flow: Archify Diagrams (tt-a1i/archify, 81k stars), JSON Canvas (heyitsnoah/claudesidian, 2.6k stars), Diagram Design (cathrynlavery/diagram-design, 47k stars) and Fireworks Tech Graph (tisfeng/Easydict, 15k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Q Flow?

supermax92 (a GitHub user) maintains it in supermax92/qgraphflow, which has 111 GitHub stars. The repository was last updated on October 8, 2026.

Source: supermax92/qgraphflow on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.