openhanako-personal-ai-agent

SUSPICIOUS. The skill is internally consistent as documentation for a highly autonomous desktop agent platform, but the platform's footprint is inherently high-risk: it combines web ingestion, file/terminal/JS execution, scheduling, messaging bridges, and third-party skill installation. The main installer path appears same-project and documented, so this is not confirmed malware, but transitive GitHub skill installs and broad autonomous host access materially elevate security risk.