flow-nexus-swarm

SUSPICIOUS: the skill’s capabilities generally match its orchestration purpose, and install sources appear same-publisher and registry-based rather than overtly malicious. However, it enables broad remote workflow execution with cloud login, mutable package installs, and agent-driven deployment patterns, so the overall risk is medium even without clear evidence of credential theft or deceptive data routing.