perf-profile

SUSPICIOUS. The skill’s stated purpose is coherent for performance profiling, but it uses pre-execution shell syntax to run a local helper before user approval and references scripts outside the skill directory. There is no clear evidence of credential theft or external exfiltration, so this is not confirmed malware, but the load-time execution and internal inconsistency about being read-only make it higher-risk than a normal documentation-style skill.