conductor

SUSPICIOUS: the skill’s stated purpose matches its behavior, and no external exfiltration path is visible, but it depends on unverifiable local scripts and enables cross-session visibility plus queued instruction injection into other Claude sessions. Risk is moderate and primarily local-trust/lateral-control rather than confirmed malware.