plankton-code-quality

SUSPICIOUS: The core behavior matches a code-quality skill, but it grants broad autonomous hook power, hides many automatic edits from the main agent, and asks users to trust copied hook code plus an additional plugin/skill chain. No clear credential theft or malicious exfiltration is present, but the install/trust model and hidden subprocess remediation make this higher-risk than a normal documentation skill.