smart-fork

SUSPICIOUS: the skill’s stated purpose is plausible and mostly aligned with its capabilities, but the real execution path relies on an unreviewable local hook script and a same-project yet unpinned external CLI install pattern. Its memory-search design also creates moderate prompt-injection risk by reintroducing historical session content into an agent that can execute commands and write files.