processflow-app

SUSPICIOUS: the skill is mostly aligned with its ProcessFlow review purpose and avoids obvious malware patterns, but it asks users to paste live authenticated curl commands so a local, not-fully-verifiable helper app can extract and reuse raw API credentials. Data appears intended to stay local or go to the real ProcessFlow service, yet the credential handling and unverifiable local-tool provenance create medium security risk.