hive-create-task

SUSPICIOUS: the skill’s core scaffolding and GitHub publishing are broadly aligned with its purpose, but it creates and executes local shell scripts and, more importantly, forwards an admin key to an unverified Hive CLI for public upload. Because an unverifiable CLI receives credentials, this meets the mandatory high-risk floor even without proof of malicious intent.