experiment-registry

SUSPICIOUS. The skill’s functional scope is coherent for local experiment-metadata management and shows no credential theft or exfiltration behavior, but it depends on an external `exp` CLI/package that could not be verified from official sources. That unverifiable dependency makes the install path high risk despite otherwise proportionate local capabilities.