teach-pro-max

SUSPICIOUS due to execution trust, not because the teaching purpose is incoherent. The skill’s stated purpose and most capabilities align, and its privacy/consent language is strong, but it depends on repo-local unverifiable executables and an unspecified bundled tool registry/runtime. I found no clear credential harvesting, proxy API routing, stealth behavior, or confirmed exfiltration, so this is high security risk rather than confirmed malware.