validator-skip

SUSPICIOUS: the skill is internally consistent as a validator-bypass wrapper, but its core function is to suppress validation gates and it relies on a local `agent-validate` executable whose provenance is not established by the provided evidence. No clear credential theft or exfiltration is present, so this is high security risk rather than confirmed malware.