ue-graph-capture

SUSPICIOUS. The skill’s stated purpose is coherent, and its file access is mostly proportionate to Unreal graph capture, but it relies on an unverifiable local CLI and allows that binary to modify projects by installing plugins. No clear credential theft or malicious exfiltration is shown, yet the install/execution trust gap alone makes the skill high risk.