json-config-manager

SUSPICIOUS: the skill's stated purpose is generic and underspecified, while its allowed tools include unrestricted shell execution and file modification. There is no direct evidence of credential theft, malware, or outbound data routing, but the capability scope is disproportionate to the minimal documented function.