guidewire-install-auth

SUSPICIOUS: The core skill is mostly coherent and routes auth data to official Guidewire endpoints, which fits its stated purpose. However, it mixes strong security guidance with a contradictory plaintext .env example and references a non-official sops-init bootstrap helper plus eval-based secret loading, creating medium supply-chain and secret-handling risk without clear evidence of malicious exfiltration.