boris

SUSPICIOUS: the core content is mostly benign workflow guidance, but the skill’s update/install mechanism is a third-party curl overwrite from an unofficial fan site, and it encourages broad autonomous agent actions and further plugin/skill trust expansion. The footprint is somewhat coherent with a Claude Code tips skill, but the distribution and autonomy model raise medium-high security risk.