Swarm Orchestration

SUSPICIOUS. The skill’s stated purpose and capabilities are broadly coherent, but trust hinges on executing an external `npx` package with inconsistent versioning/publisher signals and known security history in older releases. No direct credential harvesting or mismatched data-routing is evident in the skill text, so this looks like a medium-risk developer workflow skill rather than confirmed malware.