typescript-strict

SUSPICIOUS: The skill’s stated TypeScript-help purpose is coherent and its direct footprint is low, but it includes an unnecessary transitive skill-install recommendation to an unverifiable GitHub target. No credential theft or exfiltration is evident, yet the downstream trust-chain risk makes it unsuitable to classify as fully benign.