night-shift

SUSPICIOUS: the skill’s behavior mostly matches its stated purpose, but it enables unattended multi-repo analysis with external model CLIs and ingests untrusted repo/social content while retaining command execution and local write capability. No clear malware or credential-stealing pattern appears, yet the autonomy and prompt-injection surface make it a medium-risk skill.