verify-custom-rules

SUSPICIOUS: The skill’s capabilities mostly match its stated purpose and file access is proportionate, but it repeatedly executes an unpinned npm package from a personal publisher at runtime. This is better explained as supply-chain exposure than malicious intent; no strong exfiltration or credential-harvesting behavior is present.