ipm-live-testbed

SUSPICIOUS: the skill is purpose-aligned as a live testbed, but it operates directly on a client's production CRM and pulls multiple live secrets from AWS and 1Password into environment variables for opaque local relay code. No obvious exfiltration endpoint or malware behavior is shown, yet the combination of production write access, cleanup capability, and unverifiable local execution makes the skill medium risk.