credential-switch

SUSPICIOUS: the skill’s stated purpose is coherent, and the approval/audit workflow is safety-oriented, but its core operations depend on unverifiable local scripts that likely receive and manipulate raw client credentials and environment variables. With no source or provenance for those executables and no disclosed downstream endpoints, the trust and credential-forwarding risk is high even without evidence of confirmed malware.