kpi-dashboard-template

SUSPICIOUS. The skill’s text is generic and benign on its face, but its actual footprint is broader than necessary: unrestricted bash plus file modification for a vague KPI template helper. There is no direct evidence of malware, credential harvesting, hidden exfiltration, or untrusted installs in the provided file, but the permission scope is insufficiently justified by the stated purpose.