websocket-handler-setup

SUSPICIOUS. The skill’s stated purpose is benign, and there are no installs, credential requests, or external data flows in the artifact. However, the wildcard Bash permission is broader than necessary for a websocket setup guidance skill, making the scope disproportionate even without evidence of confirmed malicious behavior.