crafters-cli

SUSPICIOUS. The skill's capabilities broadly match its stated infrastructure-management purpose, but it requires high-privilege credentials, performs real DNS/Vercel mutations, and uses transitive skill/package installation without provenance evidence in the skill text. This looks more like a high-impact admin skill than overt malware, but it carries meaningful supply-chain and credential-forwarding risk.