codeburn

SUSPICIOUS. The skill’s stated purpose is coherent and its log-reading scope is proportionate, but the install recommendation is internally inconsistent: it routes installation through an unrelated third-party PowerShell bundle instead of CodeBurn’s official npm/documented channels. That raises medium supply-chain risk without clear evidence of outright malware or exfiltration.