remote-handoff

SUSPICIOUS. The skill's core function matches its description, but its scope is high-risk: it explicitly encourages packaging secrets and uploading them to third-party temporary hosts. Encryption reduces exposure, yet the data flow is still disproportionate for a generic handoff helper, especially with a legacy unauthenticated openssl mode and cross-agent transfer of full chat context. No confirmed malware or credential harvesting is shown, but the skill materially increases confidentiality risk.