metric-calculator

SUSPICIOUS: the skill's stated purpose is generic and benign, but its actual permission footprint is too broad for a simple metric-calculation assistant. There is no direct malware behavior, credential harvesting, installer abuse, or exfiltration endpoint, but unrestricted Bash plus write access makes the scope disproportionate and insufficiently justified.