init

SUSPICIOUS. The skill’s purpose mostly matches its actions, but it relies on six load-time pre-executed local scripts and two unpinned transitive skills whose contents are not shown. There is no evidence of credential theft, remote code fetch, or third-party proxy routing in the provided text, so this is not confirmed malware; however, automatic pre-execution plus unverifiable local script behavior makes the skill medium risk.