poteto-mode

SUSPICIOUS. The content is not credential-harvesting or overtly malicious, but its actual footprint is broader than a mere style preset. It grants high operational autonomy, subagent orchestration, and external action authority, which is only partly aligned with the stated purpose. No clear exfiltration path or suspicious installer appears, so this is a workflow-risk skill rather than malware.