skillkit

SUSPICIOUS: The stated capabilities mostly match a local skill observability tool, but the external CLI package cannot be publicly verified from the provided evidence. Risk comes mainly from supply-chain trust and broad local scanning, not from obvious exfiltration or credential theft.