session-harvest

SUSPICIOUS. The skill’s footprint broadly matches a session-harvest/checkpoint tool, but it is unusually powerful: it reads wide local state, inspects shared stores and multiple repos, and may write or locally commit durable files. No malicious exfiltration, hidden execution, or untrusted installer chain is evident, yet the breadth and autonomy are somewhat disproportionate for a 'harvest' helper and warrant caution.