flash-moe-inference

SUSPICIOUS: the skill's purpose and capabilities mostly align for a local MoE inference engine, and data flow appears local with no credential harvesting or exfiltration. The main concern is install trust: ara.so publishes the skill, but the code comes from an unrelated personal GitHub repo built into executables without stronger provenance, checksums, or same-org verification.