setup

SUSPICIOUS. The core onboarding and local file generation are consistent with the stated purpose, but the skill expands into dependency installation, execution of an unseen local shell script, raw API key collection, and home-directory cache access. These are plausible for meeting automation, yet the install/execution trust is not fully verifiable from the skill alone, so the overall footprint is broader and riskier than a simple setup assistant.