agentic-os-setup

SUSPICIOUS: The skill's purpose broadly matches its actions, and there is no explicit credential theft or outbound exfiltration. However, it delegates core behavior to an unreviewed companion skill/script and installs persistent local hooks/memory mechanisms, creating moderate trust and persistence risk disproportionate to a simple setup helper.