quarter-clone

SUSPICIOUS: The stated purpose is plausible, but the skill's real footprint depends on an external, non-bundled helper script discovered dynamically under ~/.claude. That creates a meaningful supply-chain and integrity risk disproportionate to a simple conversation-management helper, even though there is no direct evidence of credential theft or explicit exfiltration in the visible instructions.