add-user

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose, but it handles high-impact secrets and infrastructure, stages secret data locally, and depends on self-hosted personal-domain automation and weaker supply-chain trust around related tooling. This looks like an admin automation skill with meaningful security risk rather than confirmed malware.