suggest

SUSPICIOUS: the skill’s stated purpose is coherent, and the `@ericrisco/rsc` CLI appears to come from the same publisher via npm/GitHub, so this is not confirmed malware. The main risk is architectural: an always-on skill that installs other skills and performs harness maintenance creates a transitive trust chain and grants broad workflow influence beyond a normal helper skill.