lovstudio-maintain-partners

SUSPICIOUS: the core website/logo maintenance behavior is broadly aligned with the stated purpose, but the skill's trust model is weakened by a transitive dependency installed from a low-provenance GitHub repo using manual git clone rather than the publisher's documented skill installer. No clear credential theft or malicious exfiltration is shown, but the unverifiable dependency and proxy-enabled network activity make the overall risk medium-high.