seo

SUSPICIOUS. The visible snippet is only metadata plus a placeholder, so the real capabilities, credentials, and data flows cannot be validated. Based on the related project evidence, the likely main risk is medium supply-chain/transitive-install trust from remote installer and plugin commands, not confirmed malware; however, the missing full SKILL.md prevents a benign classification.