bot-process-control

SUSPICIOUS. The skill mostly matches its stated daemon-management purpose and lacks clear exfiltration or malicious download behavior, but it reaches into sensitive OAuth/token material, relies on custom unverifiable local tooling, and instructs the agent to self-modify the skill. Overall this is a medium-risk operational skill with trust and scope concerns rather than confirmed malware.