developer-experience

SUSPICIOUS: Most of the skill is benign documentation guidance, but the companion-check block is out of scope for a DX-writing skill and introduces transitive trust by encouraging installation of additional skills. No direct credential theft or exfiltration is present, but the install behavior makes the skill higher risk than a normal documentation guide.