pylot-cli

SUSPICIOUS. The skill’s capabilities broadly match its stated Pylot-operations purpose, but it relies on an unverifiable `pylot` CLI and forwards sensitive tokens to it and to remote endpoints. That combination makes the footprint high-risk even without confirmed malicious intent.