flows-agent

SUSPICIOUS: the skill's broad paid-API gateway model is coherent with its stated purpose, and the endpoint is on the publisher's own domain, so this is not confirmed malware. However, it centralizes many unrelated capabilities, routes user data through an intermediary to multiple third-party providers, and includes autonomous outbound messaging actions, making the scope and data flows higher risk than a narrowly scoped API integration.