credential-guardian

SUSPICIOUS. The core purpose is legitimate and most network checks use official vendor endpoints, but the skill has a large credential-handling footprint, requires broad secret access across local and remote systems, and introduces non-official NotebookLM auth tooling that may receive tokens. This is internally plausible for an internal ops skill, yet the combination of root SSH, exact secret locations, and third-party auth handling makes it medium-high risk rather than benign.