beadboard-driver

SUSPICIOUS: the skill’s purpose is coherent, but its install trust is not. It asks the agent to clone and globally install a core CLI from a GitHub repo with unclear publisher continuity and uses an outdated/inconsistent bd install command. Data flows are mostly proportionate to coordination, but the supply-chain risk is high enough to treat this skill as risky until the bb publisher relationship and official install path are verified.