bggg-skill-taotie

SUSPICIOUS: the skill’s purpose mostly matches its capabilities, but it is a high-privilege meta-skill that reads, executes, and modifies other skills using Bash and subagents. The main concern is indirect prompt-injection and sensitive trace capture from untrusted skills, not malware or supply-chain abuse.