dashboard-review

SUSPICIOUS due to supply-chain trust, not behavior: the skill's purpose and file access are coherent for dashboard review, and there is no credential harvesting or odd data routing. The main issue is reliance on an unpinned external CLI from a personal GitHub repo with limited release-verification signals, which raises install-trust risk disproportionate to an otherwise benign review skill.