suggest-tasks

SUSPICIOUS: the stated purpose is plausible and mostly aligned with repository analysis, but the skill’s core functionality depends on executing multiple unverifiable local scripts from ~/.claude/hooks/analyzers with no same-org official provenance, versioning, or review trail. No explicit exfiltration is shown, yet the opaque scripts can inspect sensitive project data and their real behavior cannot be validated from the skill.