flow-nexus-platform

SUSPICIOUS: the skill is largely coherent with its stated Flow Nexus platform-management purpose and uses same-org, npm-based tooling, so it is not confirmed malware. However, it is high-impact: it forwards sensitive credentials to a third-party platform, enables remote code execution in sandboxes, and supports billing/deployment actions with real-world consequences.