Command Development

SUSPICIOUS. The skill’s subject matter legitimately covers slash-command development, but the documentation embeds real pre-execution syntax that can run local commands and project/plugin scripts at skill-load time. There is no remote payload or clear exfiltration, so this is not confirmed malware, but the load-time execution behavior makes the skill high risk and internally disproportionate for a guide.