cli-anything-agent-native-software

SUSPICIOUS. The skill’s capabilities broadly fit its stated purpose as a CLI-generation/framework guide, and there is no clear exfiltration or malicious payload. The main concerns are transitive skill installation through an external skills ecosystem, unpinned package installs, and mildly fragmented provenance across ara.so, HKUDS, clianything.cc, and skills.sh.