codex-cursor-unlimited-reset

SUSPICIOUS. The skill’s purpose is itself evasion of service limits, and its implementation relies on a third-party, mutable, unverifiable remote PowerShell script executed with policy bypass and optionally persisted via scheduled tasks/profile hooks. Even without confirmed credential theft, the install path, publisher mismatch, defense-weakening guidance, and recurring remote execution make this a high-risk skill.