antfu

SUSPICIOUS: the core guidance is a coherent developer-tooling skill, and most flagged patterns are harmless documentation examples. However, the recommended prepare hook runs skills-npm, which can install or fetch additional skills via a separate CLI, creating disproportionate transitive trust and supply-chain exposure for an otherwise conventions-focused skill.