dev-server

SUSPICIOUS. The skill's capabilities fit its stated dev-server purpose and its network destinations are official Editframe endpoints, so there is no strong sign of credential theft or covert exfiltration. However, the skill depends on a separately installed local bridge/runtime executable from an Editframe URL without clear public installer provenance or artifact verification in the provided evidence, which creates meaningful supply-chain and execution-trust risk.