soia-dev-draft-test-doc

SUSPICIOUS: the skill’s stated purpose is benign and narrowly documentation-oriented, but the install path is broader than necessary because it chains through remote skill installation and requests wildcard `*` permissions. No direct credential theft or exfiltration is described, so this is not confirmed malware; the main risk is excessive install trust and disproportionate agent scope.