extract

SUSPICIOUS. The core behavior is coherent for a skill-extraction helper: it reads local Claude memory and writes local documentation files. Risk comes from trust and workflow inconsistencies: it references an unverified `skill-extractor` agent and gives install/publish commands that do not match official docs, creating a transitive-trust and user-confusion issue rather than clear malware or exfiltration.