okf

SUSPICIOUS: the skill’s core capabilities are aligned with its stated OKF documentation/validation purpose, and I found no credential harvesting or exfiltration behavior. The main concern is transitive trust: it instructs installation of remote skill content from a personal GitHub repo via the skills CLI, plus unpinned PyYAML installation in the helper script. This is a moderate supply-chain and trust risk, not confirmed malware.