setup-agent-skills

The provided code is not malicious by itself (no embedded payloads, secrets, or network actions are visible). However, it establishes a high-impact execution sink by running a local Node.js module on multiple lifecycle events, and it uses a runtime path variable to select the executed file. The actual malware/security risk cannot be confirmed without reviewing docs/agents/project-knowledge.mjs and how ${CLAUDE_PROJECT_DIR} is set and protected.