feature-store-connector

SUSPICIOUS. The skill is not overtly malicious and contains no installer, credential routing, or explicit exfiltration path, but its permissions are much broader than its vague stated purpose. The main concern is disproportionate unrestricted bash access for an underspecified documentation-style ML helper.