flow-next-impl-review Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill is highly complex with multiple workflow files, backend-specific instructions, and optional phases, which may be overwhelming for users and increase the risk of misconfiguration.
• It depends on external CLI backends (Codex, Copilot, Cursor, Claude, RepoPrompt) that must be installed and configured; the skill does not provide installation guidance.
• The skill uses a bundled `flowctl` tool that is not globally installed, which could confuse users expecting a standard CLI.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.