companion-clis

SUSPICIOUS. The core skill is mostly coherent for Runpod workflows and primarily uses official vendor CLIs and endpoints, but its security footprint is elevated by download/execute install patterns and especially by the optional community storage tool that clones third-party code and forwards Runpod API/S3 credentials to it. That credential-forwarding path is disproportionate to a companion-CLI reference and materially raises risk even though the rest of the skill looks legitimate.