things-mac

SUSPICIOUS. The core skill is mostly coherent and benign when it uses the official local things:/// URL scheme, but it also encourages installation of an unaffiliated third-party CLI with unclear provenance that is not documented by the vendor. That mismatch makes the skill higher risk than a pure URL-scheme workflow, though I found no credential harvesting, exfiltration, or confirmed malicious behavior.