coding-cli-management

SUSPICIOUS. The skill is internally coherent for delegated coding-cli management, and the cited Qwen install sources appear official rather than deceptive. However, its footprint is high-risk by design: unattended auto-approve CLI execution, ambient credential inheritance, broad delegating-agent privileges, and automatic persistence of prompts/logs to shared storage. This looks more like a dangerous operations skill than credential-stealing malware.