sya-surprise

SUSPICIOUS: the visible wrapper is small and shows no direct exfiltration or installer abuse, but its effective behavior is hidden in unreviewed sibling markdown files and it authorizes autonomous surprise actions with reduced transparency. Risk is medium due to transitive instruction trust and unverifiable action scope, not confirmed malware.