project-rebuilder

SUSPICIOUS: the skill’s purpose is coherent, but it combines analysis of arbitrary external project content with code generation, file writes, command execution, and persistent cross-session workflows. There is no clear credential theft or malicious install path, but the indirect prompt-injection and autonomous execution surface make it medium/high risk.