textme

SUSPICIOUS: the skill's stated purpose matches its capabilities, but that purpose is inherently high risk because it turns SMS/iMessage into a remote command channel for Claude on the host. The biggest concerns are disproportionate impact from a weak phone-number whitelist boundary, persistent background execution, and reliance on a personal GitHub daemon built from source. This looks like a coherent but dangerous remote-control skill, not confirmed malware.