Manifest
    by Manifold
    Back to Results
    3.36.0

    Claude Code Workflow Studio

    Visual Workflow Editor for Claude Code, GitHub Copilot, and more AI agents

    AIVisualization
    Rank#504
    Publisher breaking-brakeRegistry openvsx133,313Last scanned Sep 7, 2026, 09:07 PMRegistryHomepageGitHub
    Created
    11 months ago
    Last commit
    2 months ago
    Latest release
    @cc-wf-studio/core@0.4.03 months ago

    Security Findings

    9

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/extension.js: Axios

    dist/extension.js

    OWASP-AST06

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in src/webview/dist/assets/katex.js: fetch(

    src/webview/dist/assets/katex.js

    OWASP-AST06

    Hardcoded secrets/API keys4×

    SuspiciousScanner

    Secret Keyword: API_K...****

    Secret Keyword: PRIVA...****

    Secret Keyword: anthr...****

    Secret Keyword: AWS_S...****

    dist/extension.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: ****

    docs/ai-coding-tools-config-reference.md

    OWASP-AST04

    Dangerous security bypass flags

    SuspiciousScanner

    Bypass flag in content: --trust

    OWASP-AST06

    Unpinned dependencies

    SuspiciousLineage

    1 unpinned: @cc-wf-studio/cli