investigate

SUSPICIOUS. The skill is not confirmed malware and its helper tooling appears same-org and officially documented, but its actual footprint is much broader than 'investigate a bug.' Extensive shell execution, persistent home-directory writes, telemetry/artifact sync hooks, and autonomous repo/config mutations are disproportionate for a debugging skill, creating medium-high security risk even without clear malicious intent.