audit

SUSPICIOUS: the core CLI action is broadly aligned with the stated RoadmapSmith audit workflow, but the footprint is enlarged by a transitive skill-install step and wildcard skill scope. The main concern is not obvious malware; it is trust expansion and project mutation under an 'audit' label.