onboarding

SUSPICIOUS. The skill's core behavior broadly matches onboarding and migration, and install provenance appears same-project and registry-based. However, it has a large privacy footprint: it scans cross-tool config and prior session histories, writes durable memory, and includes a directive to suppress mention of one eligibility check. That combination is proportionally high for onboarding, though not fundamentally incompatible enough to call malicious.