harness-setup

SUSPICIOUS: the core purpose is coherent for a harness-setup skill, and there is no direct credential theft or exfiltration. The main risk is transitive trust and autonomous execution: this skill instructs the agent to invoke multiple other skills/subagents and to treat local instruction files as authoritative, expanding its effective footprint beyond what can be verified here.