ralph

SUSPICIOUS: the skill’s looping autonomy and Bash-enabled repeated execution are high-impact but broadly consistent with its stated purpose. Main concerns are the unreviewed local setup script and the ability to run indefinitely; there is no clear evidence of credential harvesting, proxy routing, or malicious exfiltration.