ra-qm-skills

SUSPICIOUS: the visible skill content is broadly aligned with its compliance purpose and shows no direct credential theft or exfiltration, but the Codex install path depends on an unrelated third-party skills CLI and performs transitive skill installation. This is a trust-chain and supply-chain concern rather than confirmed malware.