engineering-skills

SUSPICIOUS. The top-level skill is mostly a catalog/loader and is broadly consistent with its stated purpose, but it relies on a third-party npm installer and creates a transitive trust chain into many downstream skills, including potentially high-risk security and cloud capabilities. No direct credential harvesting, exfiltration, or malicious execution is visible in this specific SKILL text.