refine-agent-prompt

SUSPICIOUS. The install path is mostly coherent and same-org, but the skill’s core function is explicit system-prompt extraction and disclosure of full agent context. There is no clear credential theft or remote exfiltration, so this is high-risk introspection rather than confirmed malware.