wilma-triage

SUSPICIOUS: the core behavior fits the stated parent-triage purpose, but the skill relies on transitive installation of community ClawHub skills, reuses local Wilma and Google credentials through external CLIs, and performs autonomous calendar edits on a schedule. No clear exfiltration or malware behavior is shown, so this is a medium-risk skill rather than confirmed malicious.