claude-skill-prereq-audit

SUSPICIOUS: the core audit purpose is legitimate, but the fix phase is overbroad. It can install and run third-party tools/extensions chosen from heuristic parsing and search results, with limited provenance controls, making the skill medium-to-high supply-chain risk even without direct credential exfiltration.