setup-codemap-cli

SUSPICIOUS: the skill’s purpose mostly matches its actions, but it introduces a third-party CLI, runtime-loaded remote documentation, and persistent auto-running hooks into Claude settings. No clear credential theft or external exfiltration is shown, yet the install trust and autonomous hook behavior make it higher risk than a normal documentation-only setup guide.