product-manager-toolkit

SUSPICIOUS. The core PM capabilities are coherent and proportionate, with no direct credential theft or exfiltration signals, but the skill expands scope by instructing use of other skills and the provided install evidence depends on third-party marketplace/NPX paths that are not clearly first-party. Main risk is transitive trust and installer provenance, not confirmed malware.