refactoring-patterns

SUSPICIOUS: The refactoring guidance itself is benign and documentation-like, but the companion check and third-party skill installation flow are not tightly aligned with the skill’s stated purpose. Main risk is transitive trust expansion via `npx skills add`, not credential theft or confirmed malware.