witr-process-inspector

SUSPICIOUS. The skill's functionality is coherent and there is no sign of credential theft or data exfiltration, but its primary quick-install instructions use direct remote script execution from a personal GitHub repository that is not the same publisher as the skill branding. Official package-manager options help, yet the mutable curl|bash and irm|iex installers, unpinned Go install, and --allow-untrusted APK example make the install trust profile disproportionally risky for an otherwise benign process-inspection tool.