anyone-skill

SUSPICIOUS. The skill's capabilities mostly match its persona-distillation purpose, and the referenced OpenPersona CLI appears to be an official same-org tool rather than a random payload. However, it processes extremely sensitive personal data, can generate clone-like personas of real people, and combines untrusted external content ingestion with write/execute capabilities, making it a meaningful privacy and workflow-security risk even without clear malicious exfiltration.

No evidence of malware or intentional data theft is present. The utility performs expected local version-management operations, but it lacks path validation for slug, version, and base-dir. An attacker able to control these arguments could cause reads, writes, recursive deletion, or copying outside the intended skill directory, particularly through rollback. Restrict arguments to safe version/slug formats and resolve paths with containment checks before filesystem operations.