pi-mom

This skill is coherent with its stated purpose as a powerful Slack automation bot, but that purpose is inherently high risk. Its combination of untrusted Slack/attachment ingestion, autonomous scheduling, custom skill loading, and shell execution makes it a strong prompt-injection and data-exfiltration surface; Docker meaningfully helps, while host mode is especially dangerous.