connect-tool

SUSPICIOUS: the stated purpose is plausible, but the skill is too broad and relies on unpinned third-party installs plus raw GitHub template downloads from a personal repo. It also forwards user credentials into generated or externally installed tooling for arbitrary services, creating significant supply-chain and credential-handling risk even without confirmed malicious exfiltration.