groq-install-auth

SUSPICIOUS. The skill is mostly coherent and low-scope, but the Node install instruction appears incorrect and may point to an unrelated npm package, creating a meaningful supply-chain risk. The Python path looks legitimate, and there is no evidence of malicious exfiltration or disproportionate access.