yolo

This skill is not credential-stealing malware, but it is high-risk and suspicious because its core function is to disable approval prompts and enable unattended agent operation. The install and file-write behavior mostly matches the stated devcontainer purpose, yet the combination of autonomous mode, broad local modification, elevated container capabilities, mounted persistent config, and third-party build-time downloads makes the overall footprint risky.