agent-management

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose of local agent lifecycle management, but the install path is inconsistent with the project’s documented setup and relies on executing a cloned shell script. Same-org GitHub provenance argues against confirmed malware, yet the unverifiable installer details and transitive plugin-install capability make the skill medium risk.