cortex-setup

SUSPICIOUS. The skill's overall purpose is coherent for installing Snowflake tooling, and the dependencies appear same-vendor rather than obviously malicious. However, it reads Claude settings unnecessarily, uses mutable installer scripts and repo-clone execution, and weakens PowerShell safeguards with `ExecutionPolicy Bypass`. No clear credential-harvesting or exfiltration path is shown, but the install and execution trust model is medium risk.