xd-inventory

SUSPICIOUS. The skill's purpose is coherent and its permissions are narrow, but it relies entirely on executing a newly fetched, unpinned third-party npm package at run time. That makes this primarily a supply-chain trust issue rather than clear malware or credential theft.