browse-flows

SUSPICIOUS. The stated purpose is coherent with the listed MCP capabilities, but the real data flow goes through a third-party FlowStudio/FlowAgent gateway that holds delegated Microsoft access, which is broader and riskier than a direct Microsoft API integration. No confirmed malware or hidden execution is present in the skill file itself, but the intermediary credential and data-routing model creates meaningful security risk.