lov-write-professional-book

SUSPICIOUS. The stated purpose is plausible, but the skill relies on transitive installation plus runtime decryption of private instructions, so users cannot review what the agent will actually execute before use. Install sources appear directionally consistent with Lovstudio and official registries, which argues against confirmed malware, but the opaque paid-skill flow and external helper execution make the overall security posture medium risk.