guide

SUSPICIOUS. The skill’s stated purpose is benign documentation, but it embeds an unverifiable clone-and-execute install path for a config repo whose publisher cannot be confirmed from the skill. No credential theft, exfiltration, or stealth behavior is evident in the provided content, so this is primarily an installer trust and execution-scope concern rather than confirmed malware.