pua-ja

SUSPICIOUS: the skill is not a credential stealer or installer-based payload, but its actual footprint is broader than a simple coaching/debugging aid. It normalizes high-autonomy behavior across all tasks, encourages processing untrusted external content before consulting the user, and propagates this pattern across agent teams, creating meaningful operational and prompt-injection risk.