wk-sharpen

SUSPICIOUS: the skill’s core purpose is coherent, and there is no direct evidence of malware, credential theft, or off-platform exfiltration. Risk comes from broad local execution and write powers, autonomous commit/push behavior, and especially transitive invocation of other unverified skills/helper commands, which is more capability than a simple documentation refiner strictly needs.