monorepo

SUSPICIOUS: The core monorepo capabilities are mostly aligned and use official tooling, so this is not malware-like. However, the skill is highly autonomous, makes significant repo changes without confirmation, and includes unrelated silent telemetry writes to ~/.claude/projects; combined with unpinned tool execution, that makes the skill medium risk rather than benign.