slop-check

SUSPICIOUS. The stated purpose is coherent, but the skill’s core behavior depends on executing unverifiable sibling scripts and it processes arbitrary web content with Bash enabled. No clear credential theft or exfiltration is shown, so this is high supply-chain risk rather than confirmed malware.