findy-hackathon

SUSPICIOUS due to supply-chain and transitive-install trust expansion, not because of clear malicious behavior. The skill’s purpose aligns with its Cloudflare/Wrangler guidance, but it asks users to bootstrap from a personal GitHub starter and to install more skills, which meaningfully increases trust risk even though data flows and credential use otherwise look proportionate and benign.