task

SUSPICIOUS: the core task workflow is coherent and mostly benign, but the AGENTS.md hooks allow custom workspace and post-verification skills, creating transitive-trust risk. The built-in footprint is proportionate; the main concern is delegation to ambiguous third-party tooling like 'treehouse' or arbitrary custom skills that could expand permissions and install surface.