token-optimization

SUSPICIOUS. The core purpose is legitimate and mostly aligned, but the skill reaches beyond pure advice by recommending third-party tooling with vague install flows and possible credential forwarding. No clear malicious or exfiltration behavior is present, but supply-chain and trust-chain risks make it medium risk rather than benign.