processflow-run

SUSPICIOUS: the skill is broadly aligned with its stated purpose, but it enables autonomous writes to live customer data, depends on shared authenticated browser state, and delegates key actions to partially verified sibling skills/tools. I see no clear credential exfiltration or malware behavior in the wrapper itself, but the operational and trust-chain risk is medium.