surface-ideas

BENIGN in purpose and local data flow, but HIGH security risk from dependency trust: the skill depends on undocumented local CLIs whose provenance cannot be verified from the skill text. No evidence of credential theft, exfiltration, or malicious intent was found.