posttrainer

SUSPICIOUS. The skill's training workflow broadly matches its stated purpose, but it asks users to send HF/WandB credentials to third-party remote worker code, relies on a mutable personal-account container image, and includes transitive skill installation via remote curl. These are meaningful supply-chain and credential-forwarding risks even though the overall use case is plausible.