pruna

SUSPICIOUS. The top-level skill is coherent with its stated purpose as a suite installer, and the install source appears to be the publisher’s own repo using the ecosystem’s documented CLI. The main security issue is transitive trust: this skill’s primary action is to pull in many additional skills whose behavior is not visible here, so risk is driven by delegated installation rather than direct malicious behavior in this file.