skill-system-insight

SUSPICIOUS: the core behavior mostly matches the stated observe/evolve purpose, and there is no clear credential theft or external exfiltration path. However, for a deprecated compatibility shim it still retains broad mutation capabilities, writes across sibling skill directories, and executes unpinned same-repo helper logic while processing sensitive user-behavior data, so the footprint is somewhat broader than the description suggests.