tool

SUSPICIOUS: the stated purpose is coherent for a project tool runner, and the documented behavior is relatively constrained, but the decisive install and network behavior lives in unseen recipes and a helper script. No explicit credential theft or malicious exfiltration appears, yet installer trust and catalog data flow cannot be verified from the supplied skill alone.