wk-team-hud

SUSPICIOUS: the skill’s purpose mostly matches its cross-tool reporting behavior, and there is no clear malware, credential theft, or unofficial installer path. However, it is over-broad for a HUD, aggregates sensitive enterprise data from many systems, includes wildcard GitHub access, and adds an unverified transitive skill invocation via wk-learn, so overall risk is medium rather than benign.