flux-opencode-export-context

SUSPICIOUS. The skill’s purpose is coherent, and it does not directly exfiltrate data or forward credentials, but it relies on an unverified repo-local bundled executable and evals shell code emitted by that binary. That execution trust issue makes the skill high risk despite otherwise proportional behavior.