connect-vps

SUSPICIOUS: the core SSH/VPS setup behavior is coherent with the stated purpose, but the skill expands scope by persisting server details across agent memory, editing global Claude permissions, and chaining into other skills. The same-repo raw GitHub downloads are not clearly malicious, yet they are unpinned supply-chain risk; combined with persistent agent configuration changes, this makes the skill higher-risk than a simple SSH helper.