skillify

SUSPICIOUS. The skill’s core behavior mostly matches its purpose, but ADAPT mode expands trust to arbitrary third-party skills and remote repos, and the skill can commit/push changes across repos. No confirmed credential theft, hidden exfiltration, or malicious pre-execution behavior is present; the main concern is medium supply-chain and automation risk from external skill ingestion and publication actions.