compresso

SUSPICIOUS. The core CompressO app purpose, local media-processing capabilities, and official repo/release install paths are broadly coherent and look benign. The main concern is the separate `npx skills add` instruction pointing to an unrelated third-party skills repository, which introduces transitive trust inconsistent with the stated upstream publisher; this elevates overall risk despite otherwise local-only behavior.