plankton-code-quality

SUSPICIOUS. The core behavior mostly matches the stated purpose of write-time code quality enforcement, but the skill expands trust by recommending transitive ECC plugin/skill installation and by enabling autonomous hidden hook/subprocess actions on every edit. No clear credential theft or malicious exfiltration is present, but install trust and reduced-action visibility make this higher risk than a normal documentation skill.