zstack-ops

SUSPICIOUS: the skill's purpose and capabilities mostly align with infrastructure operations, and data flows go to expected first-party endpoints rather than third-party collectors. Risk is elevated because it reads raw local credentials, stores session cookies, and enables live infrastructure changes; however, there is no clear sign of credential harvesting, stealth, or malicious off-platform exfiltration.