onboard

The skill’s main workflow fits its stated purpose, but it contains a notable trust issue: it instructs the agent to silently self-update from remote packages before proceeding, then follow the new copy. That hidden remote-update behavior makes the skill suspicious rather than benign, even though the Calibrate setup/auth/test actions themselves are coherent with onboarding.