ops-claude

SUSPICIOUS: the stated maintenance/analytics purpose is broadly consistent with the requested Bash/Read access, but the skill’s real footprint is hard to verify because the main logic is hidden in an omitted ./run.sh and it depends on a third-party analytics CLI without in-skill provenance details. No clear credential harvesting or malicious exfiltration is shown, so this is better classified as medium security risk rather than malware.