supply-chain-audit

SUSPICIOUS: the stated purpose and remediation steps are coherent for incident response, and data does not visibly route to attacker infrastructure. However, the skill's core action is to execute an unprovided local shell script and optionally fan it out over SSH to other machines, creating a substantial trust gap and making the overall skill higher-risk than a self-contained audit guide.