build-fix

SUSPICIOUS: the stated purpose is plausible, but the skill's core behavior is to delegate troubleshooting to an external third-party agent whose ownership, install path, and data handling are not fully disclosed in the skill. This is mainly a transitive trust and supply-chain concern rather than confirmed malware.