triage

SUSPICIOUS. The skill’s capabilities mostly fit its stated triage purpose, and data flows go to official GitHub/npm tooling rather than an unrelated proxy. However, it instructs the agent to fetch arbitrary external repro content and execute installs/builds/tests, including an unpinned third-party npx package and dependencies from user-supplied projects. This is a coherent but moderately risky developer-workflow skill, not clear malware.