craftsman-agent-build-plans

SUSPICIOUS: the skill's core function matches its stated purpose, but it relies on a third-party gateway, forwards user inputs and credentials through that gateway, and includes a hardcoded demo-key fallback. This looks more like a risky proxy-based integration than outright malware.