walkthrough

SUSPICIOUS. The skill’s stated purpose is coherent, but it unnecessarily depends on a third-party CLI fetched at runtime and that tool can upload captured code/output to a remote URL if configured. This is not confirmed malware, but the supply-chain and data-flow footprint is broader than a simple local walkthrough skill should need.