dino-auth

SUSPICIOUS: The skill’s purpose and commands are mostly coherent for an auth helper and it tries to reduce token exposure, but it relies on an external `dino` CLI whose exact auth interface and provenance are not fully established from the skill or public verification. Risk is driven more by dependency trust and credential forwarding to a local binary than by overtly malicious behavior.