Is that ture?

[immortalclawdev]

Critical Security Concern

▌ Do not install Ruflo into your Claude Code workflow until you read this.

A Reddit thread reports that MCP tool descriptions in Ruflo contained hidden prompt injection that directed users to silently add the repo owner as a contributor to their repositories.

This is a serious concern for any workflow involving Claude Code, which is already trusted with access to your codebase.

!!!!!!!

[eduridden]

I can't speak for earlier versions, but I recently installed (26 Oct) and had Claude run a deep dive of the codebase, as well as generated a couple of sample projects myself. It has not added (and Claude can find no code) that suggests the addition of extra contributors.

When using any 3rd-party produced harness, it is always good to run your own security assessment over it based on your requirements. In this case, though, again, for the current version, I feel confident calling this a false alert.

[ruvnet]

@immortalclawdev Thanks for raising it. We can't see the Reddit thread from here, but the most likely source is a real behaviour that has since been fixed:

• Before 3.7.0-alpha.8 (May 2026), ruflo init wrote an attribution setting into .claude/settings.json that added Co-Authored-By: claude-flow <ruv@ruv.net> to commits Claude Code made. GitHub counts that trailer, so the maintainer showed up as a contributor in users' repos. This was reported in Co-Authored-By trailer added to commits without user consent #1670 and Co-Authored-By trailer adds ruvnet as contributor to all user repos — should be opt-in or removed #2078. Attribution is now off by default, and when someone opts in it uses a no-reply bot address.
• A separate claim about tool descriptions (in Security Audit Summary: Multiple Critical Concerns #1375) was checked in March 2026 and no such instruction was found. A search of the current MCP tool sources finds none either.

If you set up a project with an older version, check .claude/settings.json for an attribution block and delete it. The latest release (npx ruflo@latest, 3.71.4) also includes fixes for 8 GitHub security advisories from a 2026-11-04 review.

If you find a tool description or generated file in a current release that does something like this, please report it privately at https://github.com/ruvnet/ruflo/security/advisories/new.

_{Automated answer from the ruflo maintainers' discussion triage - reply here if it doesn't solve it.}