northstar-setup

SUSPICIOUS. The skill’s behavior is mostly consistent with a repo-normalization/setup skill and shows no credential theft or exfiltration path, but its central reliance on an unverifiable external CLI (Effigy) without official install/provenance evidence creates disproportionate supply-chain risk. Absent verified same-org release documentation for Effigy, treat this as a high-risk but not confirmed-malicious skill.