flow-next-plan
Warn
Audited by Socket on May 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and capabilities mostly align for planning, but it relies on an opaque bundled `flowctl` and can route repo-derived planning content to external review backends. This is not clearly malicious, yet the unverifiable local tool provenance and optional third-party review flow make the trust model weaker than a fully local, transparent planning skill.
Confidence: 82%Severity: 56%
Audit Metadata