session-share

SUSPICIOUS. The core capability fits the stated purpose, and no direct cloud exfiltration or credential forwarding is shown. The main risks are sensitive local session data being packaged for manual sharing, possible incomplete redaction, trust in third-party agent-deck, and prompt-injection exposure when importing untrusted session files. With no script bodies provided, there is no evidence of confirmed malware, but the skill has meaningful security risk due to its handling of high-sensitivity conversation context.