claude-automation-recommender

SUSPICIOUS. The core purpose is coherent: a read-only analyzer recommending Claude Code automations from codebase signals. However, it nudges users toward transitive installation of plugins/MCP servers with variable provenance, and its bundled references normalize dangerous pre-execution syntax in example skills. There is no confirmed malware or direct credential theft, but the trust boundary around recommended external automations is broader than the skill's simple advisory purpose suggests.