eightctl

SUSPICIOUS: the skill’s capabilities match its stated purpose, but it depends on an unofficial personal CLI with mutable install versioning and can perform real-world device actions using account credentials. This is not clearly malicious, but it carries meaningful supply-chain and autonomy risk disproportionate to a low-trust install source.