foundry-tidas-import

SUSPICIOUS. The skill’s capabilities broadly match its stated Foundry workflow purpose and it contains many guardrails against unsafe writes, credential collection, and shell misuse. The main risk is install/runtime trust: a local bootstrap+lock selects external runtimes/CLIs/TIDAS binaries whose exact provenance and claimed versions were not fully verifiable, so the skill should be treated as medium-high supply-chain risk rather than malicious.