graincrawl

SUSPICIOUS: the skill’s maintenance/testing scope is mostly coherent, but the Homebrew release/install path is inconsistent with the project’s apparent official publisher/org. That provenance mismatch raises medium supply-chain risk, though there is no clear credential theft, exfiltration, or hidden execution behavior.