st-execute-blueprint

SUSPICIOUS. The skill is broadly aligned with its stated purpose of executing Strikethroo plans, and the referenced installer evidence points to official npm/GitHub distribution rather than an unknown payload. However, it grants the agent substantial autonomous execution authority, can invoke transitive skill behavior, and permits external task execution routes via local dispatcher scripts, making it higher-risk than a simple documentation or helper skill even without clear evidence of credential theft or malicious exfiltration.