claat-build

SUSPICIOUS: the skill’s purpose and file access are coherent for local Markdown lint/build, and it does not request credentials or route data to third-party endpoints. However, its core execution path depends on a non-official third-party Go wrapper from a personal GitHub module, which creates moderate supply-chain risk even though the dependency is version-pinned and fetched through the standard Go ecosystem.