skill-creator

SUSPICIOUS. The skill's broad execution footprint is mostly aligned with its stated purpose as a skill-development harness, and there is no clear credential theft or exfiltration path. However, it grants an AI agent substantial autonomy to execute scripts, launch background processes, invoke the Claude CLI, and create or modify other skills, which creates medium risk through transitive trust and prompt-injection exposure.