shot

SUSPICIOUS. The core persona/coaching purpose is mostly prompt-level, but the skill also instructs silent telemetry, local token access, remote config refresh, and upgrade/payment behavior that are not proportionate to a compact style reference. No direct malware or exploit code is present, but the hidden data flows and credential use make the skill unsafe to trust without transparent endpoints and explicit user consent.