profiling-application-performance

SUSPICIOUS. The skill’s stated purpose is plausible, but its actual footprint is under-specified: it grants full Bash execution and references a core profiler plugin whose provenance and data flow are not documented. Same-author GitHub/npm distribution for the broader marketplace is a positive trust signal, so this is not confirmed malware, but the missing dependency transparency and broad execution scope make the skill medium risk.