setup

SUSPICIOUS. The skill’s broad local footprint is mostly coherent with its stated purpose of scaffolding a full knowledge system, and the qmd install path appears to be official npm-based distribution rather than a covert payload. However, the scope is very large for a setup skill: it writes extensive project files, installs many downstream skills, edits hook config, runs shell commands, initializes git, and can enable MCP auto-approval for search tooling. This looks more like an overpowered bootstrapper than malware, with medium supply-chain and execution-trust risk rather than confirmed malicious intent.