manage-flows

SUSPICIOUS. The skill is purpose-aligned for flow management and does not show obvious credential theft or third-party exfiltration, but it grants powerful autonomous operational actions with destructive impact and broad permissions. Install provenance appears mostly same-org/official, so the main risk is business-impacting automation rather than malware.