datadog-cli

SUSPICIOUS. The skill’s purpose matches Datadog observability workflows, and the Datadog key URL/site usage is legitimate, but the actual runtime trust boundary is a third-party personal npm package (`@leoflores/datadog-cli`) rather than an official Datadog CLI. Because the skill asks the user to provide Datadog API/app keys and then passes them to non-official code via unpinned `npx`, the install trust and credential-routing footprint is disproportionate and risky even without proof of active exfiltration.