skrapi

SUSPICIOUS: the core repo-analysis behavior is benign, but the skill overreaches by generating package and especially third-party skill installation commands from local metadata. This creates a supply-chain and transitive-install risk that is not strictly required for architecture documentation, though there is no direct malware behavior or credential exfiltration.