usage-view

SUSPICIOUS: mostly coherent as a local usage-reporting skill, but it grants a background agent broad autonomy and asks it to follow script-generated instructions exactly, which creates transitive trust risk. No clear credential harvesting or malicious exfiltration is described, so this is not malware, but the autonomous prompt-file execution path and handling of sensitive transcript data make it higher risk than a simple dashboard viewer.