rnd-cli

SUSPICIOUS. The purpose is coherent with querying React Native Directory and auditing RN dependencies, and the official API domain is plausible. However, the install and execution path is not proportionate to normal public tool distribution: it depends on a user-specific local desktop source tree or binary that is not verified as an official react-native-community release. That makes the core executable unverifiable and high risk even without explicit malicious behavior.