transcript-viewer

SUSPICIOUS. The skill’s core behavior is mostly consistent with a transcript viewer and its file access is proportionate, but its install/execution trust is inconsistent: it routes conversion through a third-party CLI and recommends npm/npx paths that are not verified by upstream documentation. This is not confirmed malware, but the undocumented npx execution path materially raises supply-chain risk.