configure-notifications

SUSPICIOUS. The core behavior matches a notification-configuration skill, and there is no hidden installer or credential-file theft. Risk is elevated because the skill allows arbitrary webhook destinations and shell command notification gateways, and it enables autonomous external messaging; these are proportionate to the purpose but materially expand the impact if misconfigured or abused.