skill-portability-checker

This is a readable portability-checking utility, not evident malware. However, checking imports by dynamically importing names extracted from scanned scripts can execute third-party code. Risk depends on whether the scanned scripts and importable modules are trusted; avoid running it over untrusted skills in an environment containing sensitive data.