cc-shield

SUSPICIOUS. The skill is not a credential stealer and shows no external exfiltration or installer abuse, but its core footprint goes beyond privacy tuning into ban-evasion/account-switching guidance by deleting credentials, rotating device identifiers, and clearing telemetry traces. The local-only data flow keeps malware likelihood low, yet the behavior is disproportionate to a benign privacy helper and creates meaningful security/policy risk.