flow-nexus-neural
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main Flow Nexus functionality is broadly coherent with an ML/distributed-training skill and the install source appears same-brand via npm/GitHub/docs, so this is not confirmed malware. However, the unexplained pre/post hooks into a separate local `ruvector` intelligence tool, credential forwarding through unpinned `npx @latest` code, and doc inconsistencies make the skill's actual footprint broader and less trustworthy than its stated purpose.
Confidence: 84%Severity: 63%
Audit Metadata