byod-hardware-orchestrator

SUSPICIOUS: the skill's stated purpose does involve local orchestration, so local command/file/app control is not off-topic, but the install and data-flow story is too opaque. The local agent is installed via an unspecified `curl` or `npx` command, with no verifiable publisher, package, domain, version, checksum, or release history; that makes the installer effectively unverifiable. Combined with sandbox breakout and remote command execution on the user's device, this creates high supply-chain and security risk even without confirmed malware.