configure-ecc

SUSPICIOUS. The skill’s behavior matches its installer purpose, but it materially changes persistent agent behavior by cloning a third-party GitHub repository and installing additional skills/rules into Gemini-controlled directories. Main concern is supply-chain and transitive trust, not confirmed maliciousness or credential theft.