setup-jd-solanki-skills

SUSPICIOUS: the skill's direct behavior is mostly coherent for a setup tool, but it persistently modifies global agent behavior and introduces transitive trust by enforcing /ponytail loading and recommending outside skills. No direct exfiltration or credential harvesting is present, so this is not confirmed malware, but the scope is broader than a simple local setup helper.