claudekit

SUSPICIOUS: the stated purpose matches workflow scaffolding, but the skill primarily acts as a loader for another marketplace/plugin, creating a transitive trust risk. No clear exfiltration or malicious behavior is shown, yet installing third-party plugin content is broader than a simple setup guide and warrants medium risk.