beaker-usage

SUSPICIOUS. The core beaker CLI usage is broadly aligned with the stated purpose and uses an official package/CLI ecosystem rather than obvious malware patterns. Risk comes from transitive skill installation (`npx skills update`), autonomous branch pushes, and the ability to trigger paid hosted runs; these are meaningful but not fundamentally incompatible with the skill’s purpose. No clear credential theft, covert behavior, or malicious exfiltration is present.