afk-coding-tradeoffs

SUSPICIOUS due to transitive skill installation: the skill’s core purpose is benign and its capabilities are mostly proportional, but it instructs installation of an unreviewed third-party skill from GitHub when a dependency is missing. There is no direct credential harvesting, exfiltration, or hidden execution here, so this is not confirmed malware; the main concern is supply-chain and inherited-permissions risk from the external skill.