sample-hello-skill

SUSPICIOUS: the skill’s stated purpose is a minimal hello-world demo, but its instructions and declared capabilities expand into broad system-state management with write, shell, and MCP access. There is no clear malicious payload or exfiltration path, but the scope is disproportionate and internally inconsistent with a simple validation demo.