understand-setup

SUSPICIOUS: the purpose is coherent, but the skill relies on unverifiable local code and a second local project outside the skill without clear provenance. Main risk is execution trust and broad access to sensitive ~/.claude contents, not confirmed exfiltration or malware.