agent-sandbox

SUSPICIOUS: the capability set matches a sandbox-management skill, but the data path appears to run through a third-party Flow Nexus MCP layer that may receive code, files, and secrets intended for E2B sandboxes. This is proportionate to the purpose but increases trust and credential-forwarding risk because the skill does not clearly scope what secrets are sent or document direct official endpoint usage.