humanizer-cli-detector

SUSPICIOUS. The stated purpose is coherent for a local AI-text detector, and the described runtime data flow is mostly offline and proportionate. However, the skill's core capability depends on an unsigned, unverifiable Windows binary from a GitHub release that is not clearly tied to the stated publisher, plus instructions to bypass OS/AV protections. That makes this a high supply-chain risk skill even without evidence of active exfiltration or confirmed malware.