st3gg

SUSPICIOUS: the steganography actions are locally scoped and broadly aligned, but the embedded prompt-injection tooling is an unrelated offensive capability. The skill also relies on an undocumented local CLI with no install provenance, increasing trust risk even though there is no evident credential theft or exfiltration.