pua-loop

SUSPICIOUS: the skill’s footprint is dominated by autonomous hook-driven execution, explicit suppression of user checkpoints, and transitive trust in another skill. There is no clear credential exfiltration or malicious network routing in the provided text, but the autonomy model and unverified local setup script make it high security risk for an AI agent environment.