pua-loop

SUSPICIOUS. The install source appears same-project and not overtly malicious, but the skill's core behavior is a high-autonomy loop that suppresses user interruption, keeps executing commands until success, and inherits additional unseen behavior from another skill. The main risk is not credential theft but excessive autonomous execution scope for a development helper.