package-clickstack-red

SUSPICIOUS: the skill’s actions mostly fit its infrastructure-provisioning purpose, and the SSH/credential handling is broadly proportionate. The main issue is install/execution trust: the key executor ./red and pinned colors-compute library are not publicly verifiable from the provided evidence, yet they receive high-impact cloud, DNS, and state credentials, so the skill carries high supply-chain risk despite no clear exfiltration behavior.