hyper-cli

SUSPICIOUS. The skill’s stated purpose matches its commands, and there is no explicit malicious payload, hidden execution, or credential theft flow in the text. However, it requires a preinstalled authenticated `hyperai` CLI that could not be independently verified through a clear official registry/release path, yet that CLI is entrusted with connected third-party accounts and real-world marketing actions. That combination makes the skill high risk as a trust and credential-forwarding dependency, even without evidence of confirmed malware.