auto-mcm

SUSPICIOUS: The skill’s core behavior broadly matches its stated math-modeling purpose, but it has a larger-than-necessary execution footprint: silent shell automation, autonomous stage advancement, web ingestion plus code execution, and bootstrap/install steps from a personal GitHub repo with unpinned dependencies. No confirmed credential theft or malicious exfiltration is evident, so this is high-vulnerability rather than confirmed malware.