prath-mode

SUSPICIOUS: the visible skill is mostly a workflow router, but it expands trust by recommending unpinned installation of a personal skill repository and by supporting remote skill execution. No direct credential theft, exfiltration, or exploit behavior appears in this snippet, so this is not confirmed malware; the main risk is transitive supply-chain exposure.