flowstudio-power-automate-mcp
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is coherent with its stated purpose, but its core design routes sensitive Power Automate operations and data through a third-party FlowStudio MCP service instead of official Microsoft endpoints. That, combined with high-impact workflow control and transitive skill-loading guidance, makes the skill medium-high risk even without clear evidence of malware.
Confidence: 87%Severity: 73%
Audit Metadata