managed-agent

SUSPICIOUS. The skill is mostly aligned with its stated purpose of controlling Anthropic Managed Agents, but it enables a powerful remote execution environment with persistent transcripts, arbitrary package/initScript setup, optional third-party MCP connectors, and org-wide session visibility. The main concern is expanded cloud data flow and autonomous remote action capability, not clear malware or deception.