personality-distiller

SUSPICIOUS: The core behavior is coherent for a persona-generation skill, and there is no clear malware signal, credential harvesting, or third-party binary install. The main risk is indirect prompt injection: it converts untrusted web or local content into persistent agent instruction files while overwriting the current workspace persona pack.