cook-auto-fast

SUSPICIOUS. The skill’s core purpose fits developer workflow automation, but its instruction to dynamically activate other skills materially expands trust and action scope. No clear credential theft, exfiltration, or remote installer behavior is present, so this looks more like a risky orchestration skill than malware.