hammertime

SUSPICIOUS: The skill is broadly aligned with a local behavioral hook system and shows no clear exfiltration or malicious installer behavior, but it meaningfully alters agent autonomy, can inspect broader local context, and can trigger other skills automatically. The main risk is workflow control and transitive trust expansion, not confirmed malware.