project

SUSPICIOUS. The core behavior—interviewing the user, detecting installed plugins, and generating CLAUDE.md—is aligned with project setup, but the skill’s real trust boundary extends into a third-party moai plugin ecosystem and project credential storage. The main risk is not this file alone; it is credential and project data being funneled into downstream plugins, including ecosystem components that may use an unrelated proxy domain.