skillify

SUSPICIOUS. The core skill behavior is plausible and includes a sensible approval gate, but the actual footprint is much broader than the stated purpose: extensive framework preamble, telemetry, artifact sync, repo/context harvesting, and possible project file modification. This looks more like a general gstack control plane wrapped around a scrape-codification skill than a narrowly scoped skill, so risk is elevated by disproportionate scope and opaque helper-binary execution rather than confirmed malware.