link-drop-pipeline

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose, but the footprint is high-risk: it mixes untrusted content ingestion, broad local writes, raw credential use, autonomous git/deploy actions, and remote SSH sync. The main concern is not malware evidence but disproportionate automation and prompt-injection exposure for an agent skill.