spoof-suite-hardware-identity

SUSPICIOUS: the capabilities match the stated spoofing purpose, but the trust chain does not. A purported ara.so skill installs privileged kernel/driver components from an unrelated personal GitHub source and even documents passing API keys into that unverifiable software, making the overall footprint high risk and disproportionate for safe agent use.