api-docs

SUSPICIOUS: The stated purpose is benign, and local file read/write access is consistent with API doc generation, but the skill’s footprint is broader than necessary. The main issue is unrestricted `npx *` execution plus a third-party MCP dispatch path, which creates avoidable supply-chain and data-flow risk without a clear need for this task.