on-page-seo-auditor

SUSPICIOUS: the signpost file itself is not malicious and shows no credential theft or exfiltration, but it exists primarily to redirect installation to another live skill repo through a transitive trust chain. Because the real functionality is external and unpinned, this is medium risk rather than benign.