flux-opencode-plan

BENIGN in stated purpose, but elevated risk because it requires execution of a bundled local `fluxctl` binary whose provenance is not verifiable from the skill alone. No clear credential theft or exfiltration is visible, yet the black-box executable and missing linked workflow content make this a high security-risk planning skill rather than a malicious one.