heretic

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is high-risk: it helps remove refusal safeguards from open-weight models. Install trust is mixed due to transitive skill installation and repo shell-script setup, and optional upload/web-research flows expand exposure. No direct credential harvesting or covert exfiltration is evident, so this is not confirmed malware.