compiler

SUSPICIOUS. The skill’s stated purpose broadly matches its capabilities, and there is no evidence of credential harvesting or hardcoded exfiltration. The main risk is its open-ended ingestion of arbitrary external content, including cloned repositories, while retaining file-write and Python execution capabilities, which makes indirect prompt injection and unpinned remote-content trust the primary concerns.