create-shortcut

SUSPICIOUS: the local file access fits a shortcut-manager purpose, but the auto-create mode is broader than that purpose because it executes inferred actions from unknown commands, uses conversation context to generate persistent new skills, and reads session history across projects. No strong malware or external exfiltration signal is present, but the autonomy and persistence make it medium risk.