secret-scanner

SUSPICIOUS. The skill’s stated purpose is benign, but it is underspecified and grants broader execution power than its generic guidance role requires via Bash(npm:*). No direct malware, credential theft, or exfiltration is present, but the open-ended npm execution surface and lack of concrete, verifiable tool scope create medium security risk.