iblai-ops-init

SUSPICIOUS. The core file-edit behavior is benign and aligned with the stated purpose, but the optional third-party skill installation introduces a transitive trust chain that is not necessary to update CLAUDE.md. No confirmed malware or credential theft is present, yet the install step materially increases risk beyond the skill's declared footprint.