relight

Likely benign in purpose and data flow, but medium-risk due to supply-chain trust: the official npm/CLI path reportedly downloads a native binary that later handles the API token. No clear malicious behavior or off-purpose access is shown, yet the external executable and credential handling make this skill suspicious enough to rate as medium security risk rather than fully benign.