bootstrap-ios

SUSPICIOUS. The stated purpose broadly matches iOS/bootstrap work, but the skill’s main risk is transitive: it routes the agent into a local installer script and external skill packs whose contents were not provided. There is no direct evidence of malware or credential theft in the excerpt, and the dry-run/confirmation language is a positive sign, but install trust is incomplete enough that the overall skill should not be treated as benign without reviewing bootstrap-ios-skills.sh and skill-map.md.