create-flow

SUSPICIOUS: the skill’s capabilities broadly match flow creation, but its permission scope is powerful and includes autonomous-impact actions plus optional shell execution. No confirmed malware or explicit credential theft is visible, yet the combination of broad automation control, third-party MCP dependence, and Bash fallback makes this a medium-to-high operational security risk.