sec-edgar-pipeline

SUSPICIOUS. The skill's purpose is coherent, but its footprint relies on a separately maintained third-party CLI and forwards user credentials to non-SEC services, with weaker-than-expected provenance for the core tool. No clear malware or exfiltration endpoint is shown, but the install/execution trust and credential-forwarding model are not fully aligned with the stated publisher and warrant caution.