apex-decompose

SUSPICIOUS: the stated purpose is benign and well-scoped, with no visible credential harvesting or third-party data routing, but the skill’s core acceleration step depends on missing executable scripts whose behavior cannot be reviewed. That unverifiable execution footprint is disproportionate enough to raise high supply-chain risk even without evidence of confirmed malware.