deploy-web-easypanel

SUSPICIOUS. The skill’s overall purpose is coherent for web deployment, but it weakens SSH security, handles passwords unsafely, and depends on unverifiable third-party PHP container images that receive application credentials. The behavior is not clearly malicious, yet the supply-chain and credential-handling risks are high enough to treat it as a risky deployment skill rather than benign.