artcraft-cli-recover

SUSPICIOUS. The skill’s purpose and local orchestration capabilities mostly align, and I found no direct credential harvesting or exfiltration path. However, it relies on transitive skill installation and externally sourced harness/runtime components, so its execution trust footprint is broader than a simple recovery skill and not fully verifiable from standard registries alone.