sim-studio

SUSPICIOUS: the skill’s core purpose is coherent for local workflow orchestration, and most data flows stay on localhost, but it asks the agent to access local secret files and forward an API key through an unpinned third-party CLI (`mcp-remote`) not maintained by the same publisher. This is not confirmed malware, but the install-and-credential-forwarding pattern makes the skill medium/high risk.