evaluate

SUSPICIOUS. The skill’s purpose and capabilities are mostly coherent, and there is no clear credential harvesting or malicious exfiltration. However, it inspects untrusted external content/code with subagents that can influence local outputs, and its key clone/inventory behavior is hidden inside an unseen local shell script without integrity controls, making it a medium-risk evaluation workflow rather than a benign low-risk reference skill.