setup-cms

SUSPICIOUS: the visible wrapper is plausibly aligned with CMS setup, but it delegates all meaningful behavior to an unreviewed SKILL file while handling credentials and enabling Bash/Write access. Risk is driven by hidden transitive instructions and unverifiable data flows, not by confirmed malicious behavior in the visible snippet.