cargo

SUSPICIOUS: the skill is largely coherent with an official Cargo CLI router and uses publisher-aligned npm/GitHub sources, so it does not look overtly malicious. However, it expands trust significantly by auto-refreshing remote code, installing additional skills, sending session telemetry/reports to the vendor, and enabling external account actions; these behaviors are disclosed but make the skill medium risk rather than benign.