tailnet-multi-machine

SUSPICIOUS: the skill's capabilities match remote tailnet administration, but it grants very broad autonomous authority over multiple machines, supports file transfer and config changes everywhere, and weakens SSH host verification. There is no clear third-party credential harvesting or off-tailnet exfiltration, so this is not confirmed malware, but it is a high-impact administrative skill with meaningful security risk.