schema-diff-analyzer

SUSPICIOUS: The core schema-diff behavior is coherent and low-risk, but the skill includes a transitive trust instruction to install another skill from a personal third-party repo via an unpinned npx command. That does not make this confirmed malware, but it materially increases security risk beyond the stated analysis purpose.