bypass-winston-ai

SUSPICIOUS. The skill is internally coherent, but its declared purpose is to evade AI-detection systems, and it encourages sending user text plus credentials to a third-party rewriting service. Install provenance for Rephrasy appears same-org and official, so this is not confirmed malware; the main risks are misuse, third-party data exposure, and transitive trust through unpinned external tooling.