codex-cursor-limits-resetter

SUSPICIOUS. The skill’s purpose is policy-circumvention, and its entire implementation hinges on executing an unverifiable remote PowerShell script from an unrelated GitHub account, with execution-policy bypass, optional admin elevation, persistence via scheduled task, and advice to weaken antivirus protections. Even without confirmed exfiltration, the install path and system impact are disproportionate and high risk.