setup

SUSPICIOUS. The skill’s stated purpose is coherent and its file access/write scope is mostly proportionate, but it uses load-time pre-execution and depends on external CLIs whose provenance is not clearly official or verifiable from the publisher relationship shown here. No clear credential theft or exfiltration appears, yet the install/execution trust model is too broad for a simple setup-check skill.