prompt-authoring

SUSPICIOUS. The skill’s functional purpose is benign and the flagged command-injection findings are false positives, but the install path requires executing repo-maintained Makefile logic from a personal GitHub repository without strong release verification. That makes the main concern install trust and supply-chain exposure, not malicious prompt behavior or covert data exfiltration.