cli-bridge

SUSPICIOUS: the skill's risky capabilities mostly align with its stated purpose as a CLI/local-machine bridge, but the actual footprint is large: remote installer execution, gateway-mediated auth, optional local shell/file access, and local MCP process spawning. This is not clearly malicious, yet it meaningfully increases attack surface and should be treated as medium risk infrastructure for agent-to-laptop control.