health

SUSPICIOUS. The skill is broadly aligned with Claude Code configuration auditing and shows no malicious install chain or external exfiltration, but it over-collects sensitive local data: global Claude files, memory, and recent conversation logs are all read and then pasted into subagents. That footprint is somewhat relevant yet disproportionate for many projects, making this a medium-risk privacy and prompt-injection exposure rather than confirmed malware.