examples-auto-run

SUSPICIOUS. The skill’s core behavior is mostly aligned with its purpose as a local example runner, and the only named external dependency (`uv`) appears official. The main concern is proportionality: it enables broad auto-approval and unattended execution of examples whose real side effects are unknown, while the actual wrapper scripts are not shown. No direct credential harvesting or exfiltration path is evident from the provided text, so this looks more like a high-trust automation aid than confirmed malware.