request-validator-generator

SUSPICIOUS: the skill’s stated purpose is benign, and there is no direct evidence of credential theft, malware, or malicious data routing. However, the wildcard Bash permission is broader than necessary for a generic request-validator generator skill, making the capability footprint only loosely scoped to the stated purpose.