health

SUSPICIOUS. The core health-check behavior is legitimate, but this skill’s actual footprint is much broader than a code-quality dashboard: it runs extensive same-org local binaries, manages telemetry and artifact sync, and can modify project routing files and git state. The publisher relationship appears consistent, so this is not confirmed malware, but the scope expansion and opaque helper-binary data flows make the skill medium-to-high risk.