text-cleaner

SUSPICIOUS. The core text-cleaning function is benign and well-scoped, but the mandatory pre-task auto-update flow is not proportionate to the skill’s purpose and introduces medium supply-chain risk through mutable remote metadata and transitive skill updating. No clear credential theft or data exfiltration is evident.