setup

SUSPICIOUS. The stated purpose is setup/configuration, but the skill's actual footprint is much broader: load-time command execution, aggressive credential harvesting from many local stores, third-party installs, transitive plugin installation, persistent daemons, and quiet/backgrounded actions. Some integrations are plausibly related to setup, but the combined scope and stealth directives are disproportionate and create high security risk even without proof of explicit credential theft.