create-crush

SUSPICIOUS. The skill's main risk is disproportionate privacy scope and local execution over very sensitive relationship data, plus generating impersonation-style personas of real people. Data flow appears local-only and no external exfiltration or installer chain is shown, so this is not confirmed malware, but it carries medium security/privacy risk.