wrk

Suspicious but not clearly malicious. The skill's install path is relatively legitimate, but its main trust model sends Wrk interactions through Membrane as an intermediary rather than directly to Wrk, and the broken 'official docs' reference undermines coherence. Main risk is third-party credential/data mediation and mutable CLI installs, not confirmed malware.