effectcraft-cli-puppet

SUSPICIOUS: the stated animation-editing purpose aligns with the documented local CLI/project-edit capabilities, and there is no clear credential theft or exfiltration behavior. The main concern is transitive trust: this skill depends on installing and delegating execution to another skill (`effectcraft-harness`) via npm/npx, so the effective footprint extends beyond the reviewed skill content.