sync-pstack

SUSPICIOUS. The skill’s broad file access, user-home access, cross-repo syncing, and installation of additional skills are mostly consistent with its stated purpose, so this is not fundamentally incompatible behavior. However, it carries meaningful security risk from transitive skill installation and especially from forwarding work to external Codex/Claude runtimes with owner config/network and, in bypass mode, no sandbox or approvals. That makes it high-risk operationally even without clear malicious intent.