platform-onboarding

SUSPICIOUS. The core onboarding steps are coherent and mostly same-org, but the skill expands into unverified transitive commands and may forward the Promptwatch API key through a third-party npm tool for MCP access. That makes the footprint broader than a simple setup guide and introduces medium security risk, though not confirmed malware.