claude-permissions

SUSPICIOUS: the skill’s purpose and capabilities mostly align, but it modifies the agent’s permission model, documents ways to disable guardrails, and is distributed from a personal repo via a transitive skills installer. No strong evidence of credential theft or malware, but the install trust and autonomy impact make it medium risk.