flowus-cli

SUSPICIOUS. The skill’s capabilities match its stated FlowUs purpose and it includes good safety guidance, but it relies on a not-publicly-verifiable FlowUs CLI binary from a CDN and that binary handles authentication tokens and workspace writes. Same-org domain alignment lowers malware confidence, yet the unverifiable credential-handling binary makes the overall security risk high.