yaml-config-validator

SUSPICIOUS: the skill’s stated YAML-validation purpose is generic and benign, but its actual permission footprint is overbroad. There is no evidence of malware, credential harvesting, or external exfiltration, yet unrestricted Bash access is not well aligned with the narrow documented function.