ag2-shell-tool

BENIGN. The skill’s footprint matches its stated purpose: it documents AG2 shell tools and repeatedly warns to sandbox, restrict commands, and use approval gating. The main risk is inherent to granting shell access to an agent, not hidden exfiltration, deceptive installs, or disproportionate credential collection.