proactive-agent

SUSPICIOUS: the skill’s core behavior is mostly consistent with its stated purpose, and the prompt-injection strings are defensive examples rather than attacks. However, install trust is weakened by distribution from a mutable personal GitHub repo through a generic skills installer, missing/unclear referenced files, and broad autonomous self-healing/research behavior that processes untrusted external content and could expand capabilities beyond the initial footprint.