flowus-cli

SUSPICIOUS: The skill’s purpose matches its FlowUs-focused capabilities, but its core trust model is weak. It requires installing and using a CDN-delivered CLI with private or unverifiable source, then forwarding FlowUs credentials and user data through that binary. This is not confirmed malware, but it is a high security-risk skill under the mandatory unverifiable-binary rules.