skill_creator

SUSPICIOUS: the stated purpose and capabilities are mostly aligned for a skill-authoring assistant, and there is no direct exfiltration or malicious command execution in the supplied content. The main concern is install/execution trust: it depends on an opaque local scaffold helper and undocumented auth runtime, making the credential-handling path and generated behavior not independently verifiable; this drives a high security-risk classification without enough evidence for confirmed malware.