agentic-os-init

SUSPICIOUS: The core behavior is mostly coherent with a local scaffolding skill, and there is no clear credential harvesting or exfiltration path. The main concern is the explicit instruction to install another skill via `npx skills add`, which creates a transitive trust chain beyond simple initialization; combined with Bash/write access and optional global file modification, this makes the skill medium risk rather than benign.