miles

SUSPICIOUS: the skill’s purpose and main capabilities are mostly coherent, but it relies on an opaque bundled CLI that auto-executes via hooks and handles authentication/state without independently verifiable first-party CLI documentation or release provenance. Data flows appear purpose-consistent and not overtly exfiltrative, so this is not confirmed malware, but the unverifiable execution trust and credential-handling opacity make it high security risk.