mo-book-creator

SUSPICIOUS: The core book-to-skill conversion behavior is coherent, and there is no evidence of malware, credential theft, or unverified binary installation. Risk comes from autonomous deployment behavior: it installs generated skills directly into the local agent skills directory, processes untrusted remote content, and pushes outputs to whatever git remote is configured for /tmp/goatedskills without explicit approval steps. That makes it a medium-risk skill with integrity and autonomy concerns, not a malicious one.