eas-simulator

BENIGN. The skill's capabilities fit its stated purpose of remote simulator control for Expo apps, and data flows mostly go to official Expo/EAS endpoints. The primary concern is medium supply-chain risk from repeated unpinned `npx ...@latest` execution and credential forwarding into external controller CLIs; this is risky hygiene, but not evidence of malicious intent or incompatible scope.