clearshot

SUSPICIOUS. The stated purpose is benign, but the skill's actual footprint is broader than needed: shell execution, self-updating from a mutable personal GitHub branch, persistent host-derived telemetry, and outbound sync to a Convex endpoint. These behaviors are not clearly proportionate to screenshot analysis and create meaningful supply-chain and data-flow risk.