code-injection-detector

SUSPICIOUS: the skill appears generic and under-specified, with no explicit exfiltration or malware behavior, but its broad Bash(npm:*) permission exceeds what its vague guidance-oriented purpose clearly needs. Main concern is disproportionate shell and npm supply-chain exposure, not confirmed malicious intent.