general

SUSPICIOUS: most capabilities fit a general local assistant, but the built-in workflow for discovering and installing third-party skills from external registries materially expands trust scope. The main risk is transitive skill installation and exposure to untrusted registry content, not direct malware or credential theft in this skill itself.