switchboard

SUSPICIOUS but not malicious. The skill's shell execution and supervision capabilities fit its stated purpose, but it is inherently high-impact: manifests can run arbitrary commands and send HTTP requests, and trust is delegated to an unverified local server/script. Risk is mainly from broad execution scope and manifest-controlled network actions, not from clear credential theft or deceptive install behavior.