moda-automate

SUSPICIOUS: the skill’s stated purpose is coherent, and its credential/data scope is mostly proportionate, but its core dependency is a standalone `moda` CLI that external evidence does not corroborate. That inconsistency weakens install/execution trust enough to make the skill suspicious rather than benign, though there is no clear sign of credential theft or third-party exfiltration.