gm-unknowns

SUSPICIOUS: the skill’s direct behavior is narrow and locally scoped, but it participates in a transitive skill chain and the broader `gm` ecosystem relies on same-org raw installers plus an external binary, which raises install-trust risk beyond what this single file shows. No direct credential harvesting or exfiltration is evident in this fragment.