quality-audit

SUSPICIOUS: the skill’s stated purpose is coherent and otherwise low-risk, but its install guidance is internally inconsistent with the apparent publisher ecosystem. The documented pip install target appears to be an unrelated third-party PyPI package, making this a supply-chain trust problem rather than confirmed malware.