process-runner

SUSPICIOUS: the skill’s core purpose matches subprocess management, and there is no external supply-chain or credential-routing concern, but its actual footprint is broader than advertised. Arbitrary shell execution, unconditional shell=True in background mode, weak blocklist-based safety, and indirect file/system access make it a medium-high local execution risk for an AI agent.