decompile-spa

SUSPICIOUS: the skill’s capabilities mostly match its stated reverse-engineering purpose, but it routes target URLs and teardown artifacts through external Crawlio services and relies on a partially opaque MCP/runtime stack. This is not confirmed malware, yet it is a medium-risk analysis skill with sensitive external data flow and dual-use reverse-engineering capability.