fix-on-my-computer

SUSPICIOUS: the core purpose is coherent for a local setup/test-fix skill, and Bun provenance appears legitimate, but the skill is over-broad for autonomy and unnecessarily suggests reading `~/.claude/.credentials.json`. Main risk comes from executing repo-defined scripts and transitive dependencies, not from confirmed malware or external exfiltration.