dx

SUSPICIOUS: the core audit behavior is coherent and uses only local project files, but the skill overreaches by forcing autonomous execution, automatically invoking other skills under --fix, and silently writing telemetry outside the repository. No strong malware or credential-theft signals are present, but the transitive trust chain and autonomous file-changing behavior make it higher risk than a normal audit skill.