tentacle-markdown2html

SUSPICIOUS: The skill’s main capability matches its stated purpose, but it sends full document content and an API key to a weakly verifiable remote Tentacle service with limited public provenance. Bun usage is normal and not the main concern; the key risk is third-party content transfer and credential handling through an opaque enterprise API, plus downstream coupling to another Tentacle skill.