heuristic-eval-beads

SUSPICIOUS. The core capability is coherent with the stated purpose: evaluate UX and create Beads issues locally. The main problem is install/execution trust: the recommended `pip install beads-cli` does not match Beads’ official documented install methods, creating a supply-chain mismatch. Apart from that, the skill’s scope is proportionate and there is no clear credential harvesting or explicit exfiltration in the instructions.