plankton-code-quality

SUSPICIOUS: the skill is broadly consistent with a code-quality hook system, but its footprint is heavier than a simple documentation skill because it instructs users to install and execute a personally published repo with auto-running hooks and recursive Claude subprocesses. No clear credential theft or off-platform exfiltration is described, so this is not malicious, but the install-trust and autonomous file-modification risks are material.