megadev-debug

SUSPICIOUS: the skill’s purpose and capabilities are coherent and mostly documentation-like, with no sign of credential theft or hidden execution. The main risk is install trust: it relies on a mutable Docker image from a different publisher/account than the cited upstream Megadev source, which is disproportionate enough to warrant medium risk despite otherwise benign scope and data flow.