ESLint Rule Generator Agent

SUSPICIOUS: the functional scope fits an ESLint rule generator, but the install path is a third-party transitive skill installation unrelated to the claimed eslint source, and publisher provenance for the actual distributor was not verified. No clear credential theft or malicious data exfiltration is shown, so this is better classified as supply-chain and trust risk than confirmed malware.