package-agent-network-red

SUSPICIOUS. The skill's capabilities largely match its stated purpose as an infrastructure-provisioning workflow, and the documented data flows to cloud/DNS/storage/Anthropic services are broadly coherent. However, it is high-impact automation that concentrates multiple credentials, mutates real infrastructure, and instructs transitive skill updating via the npm skills CLI; combined with only partially verifiable provenance for internal pinned libraries, that makes the overall risk medium rather than benign.