credential-switch

SUSPICIOUS: The skill's broad credential and local state access are aligned with its stated purpose, so it is not fundamentally incompatible or overtly malicious. Risk comes from delegating sensitive credential switching and validation to repo-local helper scripts from a personal project, with limited provenance and possible live token use during validation.