threejs-game-director

SUSPICIOUS. The skill’s overall purpose is coherent for a game-director workflow, and it does not show remote download-execute behavior or obvious third-party credential routing. However, it is broader than a typical build helper: it forces transitive loading of other skills, searches multiple filesystem locations for them, and probes shell-derived API credential presence for external asset tools. That combination is disproportionate enough to warrant caution, mainly as a medium-risk orchestration and credential-discovery skill rather than confirmed malware.