flow-hybrid-search

SUSPICIOUS. The skill’s purpose is coherent, but its trust model is weak: it executes an unpinned npm package at runtime, forwards a live API key into that CLI, and allows the credential to be sent to any user-supplied base URL rather than a fixed official endpoint. This is not confirmed malware, but the install path and data-flow flexibility create meaningful credential and supply-chain risk.