tidas-data-import

SUSPICIOUS: the stated purpose and most CLI capabilities are coherent for a TIDAS/Foundry import workflow, and the documented commands mostly write local artifacts. The main issue is the explicit runtime installation/use of another skill from a GitHub skills repo, which introduces transitive trust and expands the agent’s effective footprint beyond the core import workflow. No clear credential theft, stealth, or incompatible data exfiltration is present in the provided text.