install-rules

The skill appears internally consistent with its stated purpose: it aims to safely install rules into Cursor or Trae with explicit user confirmation and conflict handling, avoiding automatic writes and with clear post-install reporting. Its footprint is proportionate (no unverifiable binaries, no credential harvesting patterns, and no autonomous actions without user consent). The potential risks are mitigated by the dependency on explicit confirmation for any writes and by scoping writes to editor destinations. Overall, the risk posture is benign to medium (securityRisk around 0.25) with low malware likelihood (malware around 0.05).