skill-builder

SUSPICIOUS rather than malicious. The skill’s broad capabilities mostly match its stated purpose as a skill-builder/security-auditor, but it has a larger-than-usual trust footprint: transitive skill installation, multiple external toolchains, mutable installer paths, and a helper script that runs Claude with dangerously skipped permissions. I found no confirmed credential theft or attacker exfiltration, but the combination makes this a high-risk admin-style skill that should be treated cautiously.