synthesis-mac-sync

SUSPICIOUS. The core file-sync and git-sync behaviors are consistent with the stated purpose and use mostly native tools, so this is not malware-like. However, the skill grants an AI agent broad local file-write authority, automatic git push/pull capability, and—most importantly—permission to execute one-time bash actions sourced from an iCloud-hosted config document, creating meaningful command-execution and indirect prompt-injection risk.