monitor-tool

SUSPICIOUS: the skill's stated purpose is coherent, but it enables an agent to act on asynchronous, potentially untrusted output with Write+Bash and showcases autonomous fixing/pushing behavior. No strong malware or credential-theft signs appear, and install trust is mostly consistent with Anthropic, but the autonomy and prompt-injection exposure make this a medium-risk skill.