recoup-internal-weekly-usage-review

SUSPICIOUS: the skill’s capabilities broadly fit an internal weekly business review, but it requires unusually broad production visibility and instructs direct reading of a local Vercel session token from auth.json to hit an undocumented/internal analytics endpoint. Data mostly stays with official services and the workflow is read-only, so this is not confirmed malicious, but the credential handling and multi-system scope make it medium risk.