setup-context-driven

SUSPICIOUS: the stated purpose and repository-focused actions are coherent, and there is no clear credential harvesting or third-party data routing in the text. However, the skill fully depends on an external `roundfix` binary whose provenance and installation path are not established here, so the trust boundary is too opaque to classify as benign.