reverse-document

SUSPICIOUS: the stated purpose is coherent, but the skill includes load-time shell execution of an unverifiable repo-local helper script. There is no visible credential theft, remote download, or exfiltration in the provided command, so this is not confirmed malware; however, pre-execution before approval materially raises risk beyond what a documentation skill needs.