scrum-master

SUSPICIOUS. Based on the limited evidence, the main risk is supply-chain trust: the skill appears associated with a community-maintained marketplace rather than an official publisher-controlled channel. Because the actual SKILL.md content was not provided, I cannot assess purpose alignment, credential scope, or data flows; this uncertainty keeps the risk elevated but does not justify a malicious classification.