docfront

SUSPICIOUS: the skill’s behavior is mostly coherent with documentation authoring and migration, and there is no exfiltration or hidden execution path. However, it instructs installation of an unpinned third-party CLI whose provenance is not established in the skill text, and it uses subagent delegation plus broad file modifications, so risk is moderate rather than benign.