kafka-producer-consumer

SUSPICIOUS. The skill’s stated purpose is benign Kafka development help, but its actual footprint is under-specified and overpowered: unrestricted shell plus file-write access without concrete operational boundaries. I found no evidence of credential harvesting or malicious data routing, so this is not confirmed malware; the main issues are disproportionate permissions and weak install provenance from a third-party marketplace ZIP.