ps-poteto-mode

SUSPICIOUS. The skill is not overt malware and shows no credential theft or exfiltration path, but its actual footprint is much broader than its stated purpose. A 'style' skill should not be granting blanket MCP use, autonomous external actions, and extensive transitive workflow control without clearer scoping and approval boundaries.