switch-persona

SUSPICIOUS: the local file access fits the stated persona-switching purpose, but the core instruction to forget all previous system instructions and adopt a file as the agent's only instructions is not a legitimate skill boundary. There is no clear exfiltration or malware behavior, but it is a medium-risk prompt/control override skill.