flow-nexus-platform

SUSPICIOUS: the skill is broadly consistent with a cloud platform management interface, and the publisher/install evidence looks same-ecosystem rather than obviously deceptive. However, the scope is very broad and high-impact: it combines remote code execution, deployment, storage, payments, and tool-enabled assistant actions, with secrets forwarded into third-party sandboxes. This is not confirmed malware, but it is a medium-high risk skill that would require strong user approval and guardrails.