sociuu-cleanup

SUSPICIOUS. The skill’s capabilities largely match its stated cleanup purpose and its GitLab data flow looks direct and proportionate, but it relies on a non-publicly verifiable `sociuu` CLI plus unspecified isolation-provider/Dock components. That unverifiable core dependency raises supply-chain and execution-trust risk, though there is no clear credential harvesting, proxying, or overtly malicious behavior in the skill text.