road

SUSPICIOUS: the stated palette purpose is mostly coherent and low-impact, but the install path is broader than necessary because it directs users to install another skill with wildcard permissions. No direct credential theft or exfiltration is present, yet the transitive skill installation and broad permission scope make this riskier than a simple palette helper.