loki-mode

SUSPICIOUS: the skill’s core orchestration purpose is coherent, and the lone scanner finding is a documentation false positive. However, it materially expands trust by encouraging additional skills/MCP servers, can drive high-impact autonomous actions across the SDLC, and supports human-mediated export of project context to external LLMs. Optional gabbe integration appears same-org and not inherently malicious, so this is better classified as elevated workflow/security risk rather than malware.