create-boss

SUSPICIOUS: The skill’s stated purpose broadly matches its local file-writing behavior, and no explicit credential theft or outbound exfiltration is shown. Risk comes from broad Bash-enabled execution, handling of sensitive workplace materials, hidden local scripts not provided for review, and unverified third-party/transitive installation paths.