team-setup

SUSPICIOUS: the skill is mostly coherent for repository bootstrap/configuration, but it extends trust into external directive repos, MCP server configs, and future skill installations. There is no clear credential theft or direct exfiltration, yet the combination of cloning agent-readable instructions, merging MCP config, and enabling transitive skill installs makes it medium risk rather than benign.