flow-nexus-neural

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main Flow Nexus functionality is broadly coherent with an ML/distributed-training skill and the install source appears same-brand via npm/GitHub/docs, so this is not confirmed malware. However, the unexplained pre/post hooks into a separate local `ruvector` intelligence tool, credential forwarding through unpinned `npx @latest` code, and doc inconsistencies make the skill's actual footprint broader and less trustworthy than its stated purpose.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:39 AM
Package URL
pkg:socket/skills-sh/ruvnet%2Fruvector%2Fflow-nexus-neural%2F@cf71c29bc7d08d9dd719df04846ef3b5136112762f06221d89b0ecf4a30e52d4
Security Audit — socket — flow-nexus-neural