skill-map

The skill’s behavior is largely consistent with its stated local mapping purpose and includes reasonable guard rails, but it depends on an ai-skillet CLI whose provenance is not clearly verifiable from the provided evidence. That makes the skill suspicious from a supply-chain perspective, though there is no strong sign of credential theft, exfiltration, or malicious execution in the skill text itself.