grow-website

SUSPICIOUS: the skill’s stated purpose and local file access are coherent, and there is no direct credential theft or exfiltration. The main risk is transitive trust: it asks the agent to install and invoke multiple third-party skills via the official CLI, expanding the instruction surface beyond this reviewed skill.