skillopt-sleep

SUSPICIOUS: the skill's core behavior is coherent, but it has a large and sensitive footprint: broad transcript harvesting, persistent self-modification of CLAUDE.md/SKILL.md, and unattended scheduling/auto-adoption. The main risk is not obvious malware or exfiltration, but autonomous prompt-injection-driven self-rewrite and persistent behavior changes based on untrusted past session content.