feature-tour

SUSPICIOUS: the skill’s behavior is largely coherent with a live UI/debug onboarding tool, and its main data flows stay local. However, it has a heavy execution footprint, depends on a smaller third-party debug bridge, uses unpinned global installs, and enables significant autonomous browser/debug/file actions, so it carries meaningful security risk despite no clear credential theft or exfiltration behavior.