setup-codebase-harness

SUSPICIOUS: the skill’s purpose is coherent, but its footprint is broader than a simple setup guide because it orchestrates other skills, may introduce a third-party MCP tool, and processes untrusted repo content while gaining write/exec capability. No direct credential harvesting or exfiltration is described, so this looks like a high-trust automation skill with medium security risk, not confirmed malware.