memory-loader

The skill is not overt malware and mainly operates on local memory files, but it is broader than a simple context loader. Its main risk is autonomous project-modifying behavior—especially creating/pushing a GitHub repo—embedded in a mandatory startup routine. No suspicious third-party installs, proxy data flows, or credential-harvesting paths are evident from the provided text.