mod-anything

SUSPICIOUS. The skill is broadly capable and enables reverse-engineering and modification of third-party software/devices, which is inherently high-impact for an AI agent, but its footprint is largely coherent with that purpose and it contains substantial local-only, privacy, and user-approval guardrails. Main risk comes from scope breadth and powerful workflow automation rather than obvious credential theft, hidden exfiltration, or malicious install behavior.