biz-health-check

SUSPICIOUS: the stated purpose is coherent, but the reviewed skill is only a stub and defers its real instructions to a dynamically fetched npm CLI/GitHub content. That creates a medium supply-chain and transitive-trust risk even without overt credential harvesting or malicious data flows in the visible file.