everything-claude-code-agent-harness

SUSPICIOUS: the skill’s broad harness-management purpose matches many of its capabilities, but it still carries medium-high risk because it installs and executes a large third-party codebase, persists hooks into agent config directories, and combines untrusted-content research with execution-capable agents. No clear credential harvesting or exfiltration is shown, so this is not confirmed malware.