follow-builders

BENIGN in intent but HIGH-RISK in operation: the skill is largely purpose-aligned and uses official Telegram/Resend endpoints, with no obvious malware or deceptive installer. The main issues are autonomous outbound messaging/email, local plaintext secret storage, cron persistence, and opaque trust in a central feed service.