agent-estate

SUSPICIOUS. The skill's behavior matches its stated purpose, but that purpose is itself high risk: a persistent stop-blocking autonomous loop with cross-session memory and repeated action capability. Main concerns are autonomy abuse, ledger-driven prompt injection persistence, and executing repo-owned hook scripts from a personal GitHub clone; there is no clear evidence of credential theft or overt malware.