Skillget

flex

mcp
Guvenlik Denetimi
Uyari
Health Uyari
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 6 GitHub stars
Code Gecti
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool provides vector and hybrid search capabilities for AI agents by compiling data sources (like Claude Code session history) into a local SQLite database with embeddings and knowledge graphs. It exposes a single, read-only MCP endpoint that allows the agent to query data using SQL.

Security Assessment
Overall risk: Medium. The static code scan of 12 files found no dangerous patterns, hardcoded secrets, or requests for excessive permissions. The tool is local-first and does not depend on external cloud services. However, there are two significant security considerations. First, the primary installation method relies on piping a remote shell script directly into bash (`curl ... | bash`), which is a common attack vector and bypasses standard package review. Second, the tool processes and indexes local session data, which inherently involves accessing potentially sensitive user information. While the agent interface is read-only, the data ingestion process reads local files.

Quality Assessment
The project is actively maintained, with the most recent code push occurring today. It uses a standard permissive license (MIT) and requires a modern Python environment (3.12+). However, the tool has extremely low community visibility, evidenced by only 6 GitHub stars. This indicates that the codebase has not been broadly reviewed by the open-source community, meaning security vulnerabilities or bugs might be undiscovered.

Verdict
Use with caution: the code itself appears safe, but the lack of community review and the reliance on an unsafe installation method warrant manual verification before deploying in sensitive environments.
SUMMARY

Search and retrieval for AI agents

README.md

flex

flex

PyPI
License: MIT
Python 3.12+

Vector and hybrid retrieval for structured data. Flex compiles any data source into a SQLite database with embeddings, knowledge graphs, and structured views. Installing flex registers an MCP endpoint with a single tool — the AI agent reads the schema and writes SQL against the database.

curl -sSL https://getflex.dev/install.sh | bash

what's inside

  • flexvec — SQL vector retrieval kernel. suppress, diversify, decay, trajectory — composable operations on the score array before selection. paper.
  • MCP server — a single read-only tool (flex_search). The agent discovers the schema at runtime and writes SQL.
  • worker — a background service that detects new data and embeds it within seconds.
  • modules — data source adapters. claude_code ships built-in.

claude code

The claude_code module indexes your entire Claude Code session history — file lineage, decision archaeology, weekly digests. One install command.

curl -sSL https://getflex.dev/install.sh | bash -s -- claude-code

The installer scans existing sessions, embeds everything, starts a background worker, and registers the MCP server.

"Use flex: what's the history of worker.py?"
"Use flex: what did we build this week?"
"Use flex: how did we create the curl install script?"

→ claude code docs

how it works

data source
       │
  [compile]  parse → chunks + metadata + embeddings
       │
       ▼
  SQLite database
       │
  [manage]  knowledge graph, fingerprints, project attribution
       │
  [MCP server]  read-only SQL surface
       │
       ▼
  AI agent writes SQL

Each database is a single .db file with the same schema — chunks, edges, enrichments, and views. The database describes itself; the agent discovers what's available at query time.

local-first

ls ~/.flex/cells/
claude_code.db    284M

sqlite3 claude_code.db "SELECT COUNT(*) FROM sessions"
4547

Everything runs in-process. No external services, no cloud dependency.

curl -sSL https://getflex.dev/install.sh | bash

MIT · Python 3.12 · SQLite · getflex.dev · paper · x

Yorumlar (0)

Sonuc bulunamadi