setup-esm-remote-tool

SUSPICIOUS: the skill’s purpose and core capabilities mostly align, but it expands from local validation into credentialed remote sharing and relies on a direct-download relay wheel whose provenance is not fully verifiable here. That combination makes this a high security-risk skill even without confirmed malicious behavior.