soku-cli-integration

SUSPICIOUS: the skill’s broad capabilities mostly match its stated purpose, and the install path appears consistent with the publisher via npm/GitHub/site evidence. However, it routes sensitive data through Soku as an intermediary, enables real-world actions, and includes transitive skill installation, making it medium-to-high risk despite no clear evidence of malware.