cli-anything-intelwatch

Suspicious rather than malicious. The stated purpose is plausible for an OSINT/due-diligence skill, and it does not ask for disproportionate credentials, but the install/provenance story is weak: a pip package that requires npx with no clear publisher or endpoint transparency creates medium supply-chain and data-flow uncertainty.