remote-script-exec

SUSPICIOUS: the skill’s capabilities largely match its stated purpose, but that purpose is inherently high-impact remote execution and file transfer. The main concerns are weakened SSH trust on first contact, optional password-helper usage, and broad ability to run arbitrary scripts on remote nodes; there is no clear evidence of credential theft, covert exfiltration to third-party endpoints, or malicious installer behavior.