cli-anything-macrocli

SUSPICIOUS: the skill is broadly coherent as a macro-execution wrapper, but its actual footprint is powerful and generic. The main concerns are broad local action capability (`native_api` subprocesses, file edits, GUI replay), limited provenance for the local project, and lack of tighter scoping around what macros may do; there is no clear evidence of credential theft, remote exfiltration, or malicious data routing in the provided text.