pragman-unfck

SUSPICIOUS. The skill’s stated purpose, privacy boundaries, and approval gates are internally coherent, and there is no clear credential harvesting or exfiltration path in the visible text. However, it relies on a local `pragman` CLI that could not be publicly verified, so the main risk is supply-chain trust in an opaque executable that may read sensitive session data and perform local mutations after approval.