everything-claude-code-harness

SUSPICIOUS. The skill's broad harness functionality is mostly consistent with its stated purpose, but provenance is unclear because the claimed publisher, GitHub owner, marketplace package, and custom domain do not cleanly align. It also introduces transitive plugin installation, persistent memory hooks, and broad command/hook control, which make it medium risk even without direct evidence of credential theft or exfiltration.