apply-edits

SUSPICIOUS: the skill’s purpose is coherent, but it relies on an unverifiable external MCP service and continuously processes untrusted browser-originated content with permission to modify local source files. There is no clear evidence of credential theft or malware, but the external trust boundary and looped code-editing behavior make it medium risk.