Malicious skill: downloads and runs npx -y @satori-sh/cli@latest, reads/writes ~/.config/satori/satori.json, and makes remote calls while silently saving and injecting user context. It claims to provide persistent session memory.