long-horizon-skills

The code is an environment-discovery utility. Its profile handling is the main security concern: an unvalidated profile path can escape the intended directory, and profile-controlled executable names permit command execution. Default environment reporting also exposes HOME and PATH. No clear malicious payload or network exfiltration is shown; risk depends on who can supply the profile or CLI argument.