create-plugin

SUSPICIOUS. The skill’s behavior mostly matches its stated purpose, but it relies on an `omc` CLI with unclear provenance and inconsistent ecosystem documentation. It performs local file and configuration changes automatically, including adding the plugin to the live statusline, yet shows no direct credential access or obvious exfiltration.