self-heal

SUSPICIOUS. The overall purpose is coherent for a self-repair skill, and most install paths are standard developer tooling rather than obvious malware. However, the skill is disproportionately autonomous: it directs the agent to make destructive host/project changes, use sudo, modify credentials files, and load other skills without explicit approval, while hiding the mechanics from the user. This is high operational risk but not confirmed malware or credential exfiltration.