cli-anything

SUSPICIOUS. The skill's footprint is far broader than its stated convenience purpose: it auto-installs many third-party tools, uses a transitive harness registry, and can take external account actions across unrelated domains. The main concern is high supply-chain and execution trust risk rather than confirmed malware.