diagnose-flow

SUSPICIOUS: the core diagnostic purpose is legitimate, but the skill’s permissions are significantly broader than needed and include autonomous remote modifications to flows, connections, and runs. No clear credential theft or malicious exfiltration is present, but scope is disproportionate to a diagnosis-only skill, making it medium-high risk.