megadev-scenes

SUSPICIOUS. The skill's stated purpose and documentation are coherent and there is no sign of credential theft, exfiltration, stealth, or unrelated capabilities. The main risk is install/execution trust: it relies on an unpinned, opaque Docker image (`ewrogers/megadev:latest`) whose provenance/source could not be verified from the evidence, so the skill is not benign despite otherwise proportional scope.