harness-creator

SUSPICIOUS: the skill is largely aligned with its stated purpose and keeps data flows local, but it has moderate security risk because it executes local build/lint targets, generates executable scripts, and performs an unverified transitive handoff to another skill. No clear credential harvesting, exfiltration endpoint, or malicious mismatch is present.