setup

SUSPICIOUS: The skill’s main scanning and configuration behavior mostly matches its stated onboarding purpose, and the cited Claude Code installers are official same-vendor paths. The main security concern is optional telemetry/webhook setup that can send session events to an arbitrary user-specified endpoint, plus automatic local hook execution before Bash use. This looks more like a broad, moderately risky setup/configuration skill than malware, but its data-flow footprint exceeds a minimal onboarding wizard.