favorite-harness

SUSPICIOUS. The skill’s core purpose is benign preference lookup, but it embeds and endorses launch commands that disable user approval and sandbox protections. No credential theft, exfiltration, or malware is shown, yet the operational footprint is disproportionate because it normalizes autonomous execution with reduced safeguards.