supreme-project-audit

SUSPICIOUS due to install-trust issues, not because of overt malicious behavior. The skill’s stated purpose and capabilities are coherent for an audit assistant, but its required `ah-parser` dependency is not verifiably sourced from an official registry or publisher-controlled release channel, so the skill carries high supply-chain risk despite otherwise benign data flows.