qbr-generator

SUSPICIOUS. The skill’s core QBR purpose is plausible, but its footprint is broad: it ingests outputs from many other skills, performs mandatory web search, and can trigger downstream skills while generating executive artifacts. There is no clear credential theft or malicious payload, but the transitive trust and indirect prompt-injection exposure make it a medium-risk orchestration skill rather than a narrowly scoped benign formatter.