spaceship

SUSPICIOUS: The stated purpose is coherent for a domain-management skill, and install paths use normal package managers, but the trust model is weak. A non-official third-party CLI is given registrar credentials and serves additional runtime instructions not present in the reviewed stub. That combination is broader than necessary for a simple API integration and creates meaningful credential-forwarding and remote-instruction risk, though there is no direct evidence of malware or overt exfiltration.