flux-opencode-plan-review

SUSPICIOUS. The skill's purpose mostly matches its behavior, and RepoPrompt appears to be an official same-org integration, but the central trust issue is the bundled repo-local fluxctl binary. Because this unverifiable executable is required for core operations and can read/update project files, the skill carries high supply-chain risk even without clear evidence of credential theft or overt malware.