cli-continues-session-transfer

SUSPICIOUS: the skill’s core capabilities match its stated purpose, but it has a substantial privacy/security footprint because it aggregates sensitive local session data and forwards it into other AI tools. The main concern is install/provenance inconsistency: the skill is branded as ara.so while the actual `continues` package appears to be maintained by an unrelated personal publisher. No clear malware, covert exfiltration endpoint, or malicious pre-execution behavior is shown, but the combination of broad session access, export/handoff of sensitive histories, and publisher mismatch raises medium risk.