claude-code-analysis-research

SUSPICIOUS: the skill’s stated purpose is research/documentation, but it depends on a third-party leaked-code repo with unclear provenance and includes executable setup/troubleshooting steps that go beyond a strictly read-only guide. I found no clear credential exfiltration or malware behavior, but the publisher/source mismatch and unverified archive materially raise trust risk.