cc-hook-authoring

SUSPICIOUS: the skill’s core behavior matches its purpose, and the examples are security-conscious, but it delegates installation of executable hook packs to unspecified MCP sources whose provenance cannot be verified from the skill text. No clear credential harvesting or malicious exfiltration is shown; risk is mainly from trust in fetched scripts plus the hooks’ ability to autonomously affect future agent actions.