slash-command-factory

SUSPICIOUS. The skill’s main purpose is coherent and it lacks clear credential theft or external exfiltration, but it embeds real pre-execution !`...` syntax and generates high-capability commands with inconsistent permission guidance. Risk is mainly from command-generation scope and load-time shell example execution, not confirmed malware.