cli-policy-audit

SUSPICIOUS: the skill's stated admin/compliance purpose broadly matches log and policy operations, but it relies on an external CLI, accepts API keys directly, and can redirect authenticated traffic to arbitrary base URLs. That combination makes the data flow and trust model looser than a narrowly scoped compliance skill should be, even though the npm-based install is more normal than a raw downloader.