sync-manifest-dev

SUSPICIOUS. The skill’s behavior matches its stated purpose, and its file access/deletion rules are relatively well-scoped, so it is not fundamentally deceptive. The main risk is supply-chain trust: it pulls mutable plugin content from a personal GitHub repo and installs that content into .claude/ without pinning or verification, creating a medium-risk transitive trust chain rather than clear malware.