setup-company

The skill's footprint is coherent with its stated purpose: it gathers user-provided company/product information and writes a local company-profile.md used by other demo-prep skills. There are no evident supply-chain, credential harvesting, or data exfiltration patterns. The data flow is strictly source (user input) -> sink (local file). The overall risk is low to moderate and proportionate to the task.