Score 6 because: 5 findings present, credential+network no, the primary criterion that pushed to this sub-tier is multiple significant findings including remote code self-update and external upload of local skill contents.

The package appears to do what it claims: it is a cloud-backed skill scanner. The main concern is not hidden theft of SSH keys or tokens, but that it sends scanned content and device metadata to a third-party service and keeps a persistent client identity.

The auto-update path materially increases risk because the tool can replace its own code from a remote manifest on future runs. Even with hash checking, trust is delegated to the remote update service and an environment-variable-overridable source.

Its filesystem powers are strong but mostly transparent: it can delete flagged skills after asking and overwrite itself during upgrade. That is defensible for a scanner, but still worth reviewing before installation.

Overall this is a cautionary install rather than an outright block: the behavior is largely disclosed, but the combination of outbound uploads, host fingerprinting, broad environment enumeration, and self-modifying updates deserves scrutiny.