skills/microsoft/power-platform-skills/create-flow/Socket

create-flow

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's core purpose is legitimate and its MCP actions mostly fit flow creation, but the permission scope is broader than necessary and all operations are mediated through a third-party FlowStudio MCP service rather than direct Microsoft APIs. No direct malware indicators or embedded download-execute behavior are present in the skill file itself, but the broad operational authority and intermediary data path make it medium risk.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jul 10, 2026, 10:57 AM

Package URL

pkg:socket/skills-sh/microsoft%2Fpower-platform-skills%2Fcreate-flow%2F@ffcadbc46b94b08552c0c9d03d5a92d63d6f5a69478970b712eb7774c73e16c1