suggest

SUSPICIOUS. The skill’s behavior is broadly aligned with a session-management/harness role, and its CLI source appears to come from the same named publisher via npm/GitHub rather than an arbitrary download host. However, it is an always-on meta-skill that can install other skills, mutate local harness state, and perform some self-repair actions with limited user visibility; that transitive trust expansion is disproportionate enough to treat as medium risk rather than benign.