init-project

SUSPICIOUS: the core bootstrap behavior is mostly coherent with a project-init skill, but risk rises because it mixes untrusted web research with write/exec capability and explicitly encourages transitive skill installation. No strong evidence of malware or credential theft, but the trust chain and prompt-injection exposure make this medium risk.