hostnsoft-deploy

SUSPICIOUS. The skill’s behavior mostly matches its stated deployment purpose, but it sends source code and a deploy token to Hostnsoft endpoints that could not be independently verified from the provided evidence, and its token setup instructions reference a login URL reported as invalid. The capability is coherent, but install/data-flow trust is weak enough to treat this as medium-high risk rather than benign.