flow-spec

SUSPICIOUS. The skill is largely coherent with its stated NLSpec authoring purpose, and the referenced external CLIs appear to be official tools rather than random payloads. However, it relies heavily on local opaque plugin scripts, broad shell execution, and multi-provider data routing, so the overall footprint is higher-risk than a simple documentation skill even without clear malicious intent.