codex-cursor-claude-usage-resetter

SUSPICIOUS. The skill's stated purpose is to evade trial/usage limits, and its actual footprint matches that evasive intent: remote unverified script execution, policy bypass, admin-level file deletion, machine-identity changes, and optional persistence via scheduled tasks. The largest risk is install trust: the ara.so-branded skill routes execution through an unrelated, unverifiable raw GitHub PowerShell script, which is disproportionate and unsafe even if the described local-reset behavior were taken at face value.