craftsman-agent-build-plans

SUSPICIOUS: The skill’s core purpose is coherent, and its package installs are conventional, but trust is weakened by a hardcoded demo-key fallback, partially verified package provenance, and routing through a gateway/CLI layer instead of clearly documented first-party Craftsman endpoints. This looks more like a risky hosted integration pattern than confirmed malware.