cluso-inspector

The skill's stated purpose matches its capabilities: inspecting a user-shown web element and returning visual/HTML context. The main concern is install trust from unpinned `npx` execution of an npm package whose provenance was not confirmed in the provided evidence, plus moderate exposure to untrusted page content. This is better classified as suspicious/medium-risk supply-chain and content-handling behavior, not confirmed malware.