managing-monorepo

SUSPICIOUS due to transitive skill installation, but not malicious. The skill's behavior is coherent with monorepo management, uses legitimate tooling, and shows no credential harvesting or exfiltration; the main risk is delegating trust to additional third-party skills via the skills CLI.