desktop-mouse

SUSPICIOUS: the stated purpose and command scope are coherent for local mouse control, and there is no visible credential theft or exfiltration path. However, the skill depends on an unverifiable external binary (`molt-mouse`) with unclear publisher provenance, which creates a high supply-chain risk even though the runtime behavior is otherwise narrowly scoped.