continues-cli-session-transfer

SUSPICIOUS: the skill is broadly consistent with a session-transfer tool, and install flow is standard npm rather than a hidden payload. However, it has a sensitive footprint: it reads large amounts of local AI session data and forwards it into other tools, encourages rate-limit bypass workflows, supports passthrough of risky auto-approve flags, and shows a publisher-identity mismatch between the skill branding and the visible package/repo owner.