diagram

SUSPICIOUS. The stated purpose is benign, but the actual footprint is much broader: telemetry, artifact sync, repo mutation, git operations, and many unverifiable local helper binaries. That mismatch makes the skill high-risk even without clear proof of credential theft or overt malware.