information-architecture-and-navigation

SUSPICIOUS: the stub’s stated purpose is plausible, but its main function is to direct installation of a separate remote skill via `npx`, creating a transitive trust and supply-chain risk disproportionate to a simple reference stub. No direct credential theft or exfiltration is shown in this fragment, so this is not confirmed malware.