GraphQL Schema Analyzer

SUSPICIOUS: the stated GraphQL analysis purpose is plausible, but the skill's actual footprint is chiefly a third-party transitive installation from community registries rather than direct upstream tooling. No strong evidence of credential theft or malicious behavior appears, but publisher mismatch, unpinned registry install, and weak provenance make it a medium-risk supply-chain skill.