aif

SUSPICIOUS. The skill’s purpose broadly matches project setup, but its footprint is enlarged by transitive installation of external skills and execution of npm-delivered tooling/MCP packages, including mutable and one outdated package reference. The built-in security scan and manual review reduce risk, but they do not remove the core trust-chain expansion or credential forwarding to third-party MCP processes.