metadata-optimizer

SUSPICIOUS: The skill’s capabilities mostly fit ASO metadata optimization, and fastlane/App Store Connect usage is legitimate. The main concerns are reliance on a third-party aso-cli/service for keyword analysis, credential forwarding to that service, and a medium-trust install path that includes unpinned curl|bash and an unmaintained project. This is not confirmed malware, but it carries meaningful supply-chain and third-party data-flow risk beyond a purely official Apple workflow.