fit-universe

SUSPICIOUS: The skill’s capabilities mostly match its stated synthetic-data purpose, but trust is reduced because the npx-distributed CLI was not independently verified as an official same-org package and because optional LLM calls use a configurable endpoint. Scope is otherwise broadly proportionate, with moderate supply-chain and outbound-data risk rather than clear malicious behavior.