procedural-fish-render

SUSPICIOUS. The stated purpose matches the capability, but the skill's footprint relies on cloning mutable upstream code from GitHub and executing the project's own pnpm render pipeline. There is no obvious credential theft or exfiltration, yet the auto-update plus execute pattern creates meaningful supply-chain risk disproportionate to a simple rendering helper.

No direct evidence of malware or intentional sabotage is present in this source file. It is a build/render automation script, but it inherently executes arbitrary code from a remotely cloned repository through pnpm install and pnpm run. Use only with trusted repository URLs, pinned commits or reviewed branches, isolated environments, and controlled secrets. The wrapper has a moderate supply-chain and path-handling risk despite low evidence of malicious intent.