bluesky

SUSPICIOUS: the skill’s basic purpose is coherent, but it combines autonomous public posting with reliance on a non-official third-party CLI that handles authenticated Bluesky actions. The main concern is proportionality and trust delegation, not confirmed malware or hidden exfiltration.