flow-nexus-platform

SUSPICIOUS: The skill’s capabilities broadly match its stated Flow Nexus platform-management purpose, and the scanner’s secret/install hits are mostly documentation artifacts. Risk is elevated because the skill centralizes high-impact actions—remote code execution in sandboxes, credential forwarding, app deployment, storage publishing, and payment/auto-refill configuration—so compromise or misuse of the vendor platform/tooling would have significant consequences. No confirmed malware, hidden exfiltration, or deceptive installer behavior is evident from the provided evidence.