safe-rm

This skill specification describes a destructive but plausible utility: a git-aware delete tool that backs up modified/untracked files to .safe-rm and deletes unmodified tracked files (including entire directories with rm -rf). There is no evidence of network activity, credential harvesting, obfuscation, or explicit malicious intent in the provided text. The primary risks are operational: irreversible deletion if path checks are bypassed or if the implementation fails to canonicalize/validate paths correctly, and the inherent danger of allowing an agent to run destructive file operations without interactive confirmation. If implemented, the script must enforce strong path canonicalization, validate containment inside the git repo (resisting symlink/race attacks), and ideally require explicit confirmations or a dry-run mode when used by automation. Overall this appears non-malicious but potentially dangerous if misused or poorly implemented.