setup-routines

SUSPICIOUS. The skill is internally coherent for routine setup, and most referenced tools are legitimate, but its footprint is high: it executes repo-defined commands, writes durable cron state, and stores reusable Claude/GitHub tokens for unattended local jobs. This looks like a powerful infrastructure/setup skill rather than malware, but it carries medium-high security risk and should only be used with trusted repos and careful human review.