gsd

SUSPICIOUS. The stated research purpose is benign and the file itself contains no direct exfiltration, credential access, or malicious commands, but its actual footprint depends on an externally referenced agent with inconsistent provenance. The strongest concern is supply-chain trust: the surfaced install source is an unpinned ZIP from a personal repo, while the named agent is documented under a different org/project. That mismatch is disproportionate enough to classify the skill as suspicious rather than benign.