gui-automation

SUSPICIOUS: the skill’s capabilities mostly match its GUI automation purpose, and the installer appears to be official same-org infrastructure rather than an unrelated payload. The main risks are the unpinned `curl|sh` install path, broad local/remote computer control, shell execution on the target, and possible handling of API keys/screenshots by the external CLI; these are proportionate to the task but high-impact enough to warrant caution.