squad-init

SUSPICIOUS. The skill’s core behavior matches project registration, but trust is weakened by an opaque Cloud Run endpoint, an unseen local api helper that likely handles PATs, and support for arbitrary custom board URLs that can redirect authenticated traffic to third parties. No clear malware or exploit behavior is present, but the data flow and endpoint trust are only partially verifiable.