setup

SUSPICIOUS. The core behavior mostly matches a repo bootstrap skill, but its footprint is broad: shell execution, repo-wide inspection, automatic commits, plugin installation, and transitive skill use. The main concerns are supply-chain/install trust around hookify invocation, transitive plugin loading, and prompt-injection exposure from reading untrusted repository/history content while retaining write/exec capability. Same-org evidence for hookify reduces concern, so this is not malicious, but it is a medium-risk skill.