create-cli

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and it uses official provider endpoints plus standard Cargo workflows. The main concern is data-flow integrity from arbitrary external docs/specs into generated code and local execution, which creates medium risk via indirect prompt injection and unsafe code generation rather than clear malware or credential theft.