osint

The skill is largely aligned with its stated OSINT purpose and avoids obvious malware patterns, credential theft, or covert exfiltration. Main risk comes from high-volume untrusted content ingestion with file-writing capability, plus optional third-party scraping/actor services and an unverifiable local heartbeat helper path. Overall this looks like a legitimate but medium-risk investigative skill rather than confirmed malicious content.