aap-lint

SUSPICIOUS. The skill's stated purpose is coherent with linting local Ansible content, and it does not appear to exfiltrate data or request disproportionate credentials for this sub-skill. However, it relies on cloning and executing an unpinned MCP wrapper from a personal GitHub repository with no clear release verification, so the main risk is supply-chain trust rather than malicious behavior in the skill's declared workflow.