awiki-group

SUSPICIOUS: the skill’s stated purpose matches its visible group-management commands, and it includes confirmation rules for destructive actions, but its core execution depends on an unverifiable external CLI and an unverified shared skill. There is no direct evidence of malware or credential theft in the visible text, yet the opaque binary trust boundary and wildcard CLI permission make the skill high risk.