setup-harness

SUSPICIOUS. The skill’s core purpose is coherent with its capabilities, and most reads/writes are proportional to setting up hooks and merge automation. The main risks are the hidden trust placed in an unseen local installer script, an unpinned transitive updater command (npx skills@latest update), and creation of an executable cleanup hook from a user-provided command. No clear credential theft or malicious exfiltration is shown, but the execution footprint is significant enough to warrant caution.