nim-cli-tool

SUSPICIOUS: the skill's stated purpose is benign, but its installation instructions are internally inconsistent and route users to an apparently unrelated third-party PyPI package instead of Nim's official distribution paths. No credential access, exfiltration, or hidden behavior is present, so this is not confirmed malware; the main risk is supply-chain confusion and incorrect installation guidance.