helmor-cli

SUSPICIOUS: the stated purpose is coherent for a product-specific CLI skill, but trust in the underlying `helmor` executable is not verifiable from public evidence. The main concern is opaque binary provenance and a broad action surface, not confirmed malware or credential theft.