flux-opencode-setup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The GitHub repo is from an unfamiliar user and the workflow explicitly instructs copying/executing unreviewed scripts (including "Do NOT read fluxctl.py"), which is a high‑risk pattern for malware distribution.