iskronify

SUSPICIOUS. The stated purpose mostly matches the file-writing behavior, but the skill’s core dependency on an unverifiable private toolchain (`iskron_*` and `iskron-bridge`) makes its trust boundary too broad and opaque for a repo-standardization skill. No clear credential theft or overt exfiltration is shown, but the autonomous write scope plus opaque external tooling makes this a high security-risk skill rather than benign.