frontpage-profile-dev

SUSPICIOUS: the skill’s stated dev/testnet purpose is coherent, and its network targets are proportionate, but it asks the agent to install another unpinned third-party skill repo and relies on external tooling whose provenance is not fully verified in the provided evidence. Main risk is transitive/supply-chain trust, not clear malware.