humanizer-cli-detector

SUSPICIOUS: the stated purpose is coherent for a local text-analysis tool and there is no clear credential theft or exfiltration path, but the install path relies on an unsigned, personal-account GitHub release binary with weak provenance and no surfaced verification. This makes the skill high risk from a supply-chain perspective despite otherwise proportionate capabilities.