token-cost-ranking

SUSPICIOUS: the business purpose is coherent and the workflow is read-only, but the core dependency is an externally installed `dce` CLI whose ownership and official distribution could not be verified from public same-org documentation. Because the skill depends on unverifiable CLI auth/context to access tenant cost data, its install-trust and credential-forwarding posture is disproportionate enough to warrant caution even without clear malicious behavior.