cc-connect

SUSPICIOUS: the skill’s functionality broadly matches its stated purpose, and install provenance is mostly legitimate via npm and a matching public repo. However, its footprint is high-risk by design: it forwards messaging credentials to an external CLI, exposes a local coding agent to remote prompting from chat, and supports autonomous scheduled/public messaging actions. This looks more like a powerful remote-control bridge than overt malware, but it should be treated as high operational risk.