amaran-lights

SUSPICIOUS: the stated purpose matches local light control, but the install trust is weak because the `amaran` CLI source is not verifiable from the skill and public evidence suggests an unofficial personal project. The skill also imports local mesh keys from another app's database and asks to be linked into the agent skill loader, making the overall footprint higher risk than a simple device-control guide.