outlines

SUSPICIOUS. The main outlining behavior is coherent and low risk, but the optional competitor-search step relies on an unshipped, unverifiable local helper script with unclear provenance. No credential harvesting or overt exfiltration is evident, yet the external helper dependency is disproportionate enough to raise supply-chain risk.