cdc-pipeline-creator

SUSPICIOUS: the stated purpose is generic and benign, but the skill’s actual footprint is overly broad because it grants unrestricted shell access without any concrete, scoped workflow, tools, or endpoints. There is no evidence of malware or credential harvesting, but the permission scope is disproportionate and raises medium security risk.