setup

SUSPICIOUS: The skill's core function is coherent, and there is no installer or credential forwarding, but it silently scans local Claude/context files and nearby skills before asking the user, then combines that with untrusted web content to generate and write files. Main risks are privacy over-collection and indirect prompt injection from fetched content, not confirmed malware.