ssh-setup

SUSPICIOUS: The skill’s capabilities match its stated purpose, and its install path is mostly consistent with standard OpenSSH usage. However, it enables public remote root access, optionally via password authentication, and authorizes the agent to make that exposure without per-action confirmation. This is coherent but high-impact, so the main risk is powerful system/network exposure rather than malware or deceptive credential routing.