native-module

SUSPICIOUS: The stated purpose is coherent for a React Native scaffolding skill, and there is no direct credential harvesting or exfiltration. The main risk is transitive trust: core behavior is handed to two unpinned, ambiguously published subagents whose provenance is not verifiable from the skill text, making the execution footprint broader and less trustworthy than a self-contained scaffolding/review skill.