deduplicate

SUSPICIOUS: The skill’s core dedup purpose is mostly coherent, but it pushes a vendor-specific MCP install and routes credentials through an unpinned npx package whose exact public provenance was not fully verified. Data flows are broadly aligned with list-building, yet the install-trust and credential-forwarding footprint is larger than a simple dedup guidance skill needs.