game-automation

SUSPICIOUS. The skill’s capabilities mostly fit game automation, but the main risk is install trust: it relies on a powerful local `um`/`um win` tool and setup path whose publisher, source repository, and release verification are not provided. That makes the core executable dependency unverifiable, triggering a high security-risk classification even though the visible markdown itself does not show clear malicious behavior or real command-injection logic.