clade-local-dev-loop

SUSPICIOUS: the skill's purpose is coherent and permissions are broadly proportionate, but the TypeScript install instruction references a package name that does not match Anthropic's official SDK documentation. Because the skill forwards an API key to installed SDK code, that package-name mismatch creates meaningful supply-chain and data-flow risk even though the rest of the workflow looks like normal local development guidance.