detecting-infrastructure-drift

SUSPICIOUS. The stated purpose is plausible, but the skill’s core capability relies entirely on an unverified `drift-detect` executable with no trustworthy install path or vendor attribution. There is no direct evidence of malicious behavior or credential theft in the text, but the opaque external dependency creates a high supply-chain risk disproportionate to the documentation provided.