omd-apply

SUSPICIOUS: the stated purpose is UI/brand application, and most file reads/edits fit that purpose, but the skill's footprint is unusually large for that goal. It mandates local script execution and browser/CDP automation, and some required script behavior is unverifiable from the supplied content. No clear credential theft or exfiltration is present, so this is not confirmed malware, but it carries medium security risk and should be reviewed with its bundled scripts before use.