autonomous-agent-harness

SUSPICIOUS: The skill’s capabilities mostly align with its stated purpose as an autonomous agent harness, and its network/data flows point primarily to official Anthropic mechanisms rather than obvious third-party interception. Risk comes from broad autonomous action scope, persistent memory, optional computer use, and unpinned npx-based MCP execution; these are proportionate to the purpose but still meaningfully dangerous if enabled without tight user scoping.