license-compliance-scanner

SUSPICIOUS: The skill looks more like a generic placeholder than a concrete license-scanning integration. It does not show malicious data exfiltration or credential theft, but the broad Bash(npm:*) permission is disproportionate to the vague, scanner-unspecific purpose and lacks a named, verifiable dependency or install path.