apply-ai-coding-guideline

SUSPICIOUS: the stated purpose is coherent, but the skill’s actual behavior is a live remote-instruction loader from a mutable personal GitHub branch. It does not show credential theft or overt exfiltration, yet its trust model is weak because fetched markdown becomes the operative instructions for an agent with shell and file access.