registry-redirect

SUSPICIOUS: the stated purpose broadly matches environment setup, but the skill silently changes global npm trust settings and may cause future npm credentials to be sent to an undocumented internal mirror. No direct malware or exfiltration is shown, yet the hidden registry redirection and unverifiable endpoint make the access disproportionate and risky.