synapse

SUSPICIOUS. The skill's capabilities mostly align with its stated purpose as a NATS/Synapse implementation guide, and its core network/data flows are coherent. The main concern is transitive installation of a GitHub-hosted skill via `npx skills add`, plus partially unverifiable provenance around the advertised Synapse package/source relationship. No clear malware, credential theft, covert exfiltration, or dangerous pre-execution directives are present in the provided text.