cc-yolo-mode

SUSPICIOUS: the skill’s main risk is not malware but disproportionate autonomy. It grants an AI agent web access, bash, editing, and iterative self-directed execution with minimal confirmation, plus cross-project persistence in ~/.claude/commander/. No clear credential theft or external exfiltration is present, but the capability mix is high-risk and not fully consistent with its own project-bound guardrails.