brain-mode

SUSPICIOUS. The skill is internally coherent as a meta-orchestrator, but its broad orchestration scope, remote model routing, memory ingestion, and mandate to activate other skills/MCP servers create meaningful security risk. No confirmed malicious behavior is present, and the optional CLI appears same-org, but the overall footprint is high-trust and susceptible to exfiltration, prompt-injection, and transitive trust expansion.