sjskills

SUSPICIOUS: The skill’s behavior is largely coherent with its stated purpose of reconciling managed skills, and its credential/data flows are mostly direct and proportionate. The main concern is install/execution trust: sjskills is a powerful local CLI but its public publisher/release provenance is not clearly verifiable from the provided evidence, so invoking it for global or project mutations carries medium supply-chain risk rather than clear malicious intent.