rheged-skills-setup

SUSPICIOUS. The core reconcile/write behavior is coherent and mostly local, but the optional --install mode expands scope into transitive skill installation through an unrelated third-party CLI and mutable GitHub/raw sources. No confirmed credential theft or covert exfiltration is present, but the install trust chain is broader than necessary for a setup/reconcile skill.