agentic-harness-engineering

SUSPICIOUS: the skill’s capabilities mostly fit its stated purpose, but trust boundaries are weaker than ideal. The main concerns are the unpinned official curl|sh installer, the repo being hosted under a personal GitHub account rather than the skill publisher’s org, and broad automated code-edit/exec workflows that ingest external search content. No clear credential theft, covert exfiltration, or malicious mismatch is evident.